Description
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.
Remediation
References
Related Vulnerabilities
IBMHttpServer Untrusted Pointer Dereference Vulnerability (CVE-2026-8835)
Dolibarr CVE-2023-38886 Vulnerability (CVE-2023-38886)
WordPress Plugin Flipbox Builder PHP Object Injection (1.5)
Django Improper Authentication Vulnerability (CVE-2013-1443)
MOVEit Transfer Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-10699)