Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user.

Remediation

References

CVE-2019-17315

Related Vulnerabilities

WordPress Plugin WebP Express Arbitrary File Disclosure (0.14.10)

WordPress Plugin WooCommerce Checkout Manager Multiple Unspecified Vulnerabilities (3.6.9)

MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4452)

WordPress Credentials Management Errors Vulnerability (CVE-2016-5838)

Joomla CVE-2018-17859 Vulnerability (CVE-2018-17859)

Severity

High

Classification

CVE-2019-17315 CWE-915 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities