Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user.
Remediation
References
Related Vulnerabilities
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.10)
SharePoint CVE-2020-17015 Vulnerability (CVE-2020-17015)
MySQL CVE-2019-3003 Vulnerability (CVE-2019-3003)
WordPress Plugin Related Posts Multiple Cross-Site Request Forgery Vulnerabilities (1.0)
Oracle Database Server CVE-2010-0901 Vulnerability (CVE-2010-0901)