Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.

Remediation

References

CVE-2019-17294

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12648)

WordPress Plugin Super Logos Showcase for WordPress Arbitrary File Upload (2.2)

WordPress Plugin WooCommerce Security Bypass (2.1.7)

WordPress Plugin WP Selected Text Sharer Multiple Vulnerabilities (1.0)

CrushFTP Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-18288)

Severity

High

Classification

CVE-2019-17294 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities