Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.
Remediation
References
Related Vulnerabilities
silverstripeCMS Incorrect Authorization Vulnerability (CVE-2021-28661)
Oracle Database Server Credentials Management Errors Vulnerability (CVE-2007-6260)
Joomla! Core 3.0.x Clickjacking Vulnerability (3.0.0 - 3.0.1)
IBM RTC Other Vulnerability (CVE-2015-0112)
WordPress 3.9.x Cross-Site Scripting Vulnerability (3.9 - 3.9.9)