Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.

Remediation

References

CVE-2019-17293

Related Vulnerabilities

WordPress Plugin JiangQie Official Website Mini Program SQL Injection (1.1.0)

Serendipity Other Vulnerability (CVE-2005-1451)

PHP Improper Input Validation Vulnerability (CVE-2007-3799)

Oracle JRE CVE-2017-10348 Vulnerability (CVE-2017-10348)

WordPress Plugin Side Menu-add fixed side buttons SQL Injection (3.1.3)

Severity

High

Classification

CVE-2019-17293 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities