Description SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user. Remediation References CVE-2019-17296 Related Vulnerabilities Zope Web Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-41050) SharePoint CVE-2022-41061 Vulnerability (CVE-2022-41061) Oracle JRE CVE-2012-0507 Vulnerability (CVE-2012-0507) WordPress Plugin WP Job Manager Unspecified Vulnerability (1.32.2) PHP Other Vulnerability (CVE-2015-6836) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2019-17296