Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.

Remediation

References

CVE-2019-17293

Related Vulnerabilities

Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1999007)

WordPress Plugin Store Locator for WordPress with Google Maps-LotsOfLocales SQL Injection (3.11)

Chamilo Improper Privilege Management Vulnerability (CVE-2022-27421)

Microsoft SQL Server CVE-2023-21718 Vulnerability (CVE-2023-21718)

Severity

High

Classification

CVE-2019-17293 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities