Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
Remediation
References
Related Vulnerabilities
WordPress Plugin The Crawl Rate Tracker 'sbtracking-chart-data.php' SQL Injection (2.0.2)
MySQL Out-of-bounds Write Vulnerability (CVE-2020-15358)
Python Improper Input Validation Vulnerability (CVE-2023-27043)
WordPress Plugin Simple Ads Manager Multiple Vulnerabilities (2.6.96)
WordPress Plugin WordPress Comments Import & Export CSV Injection (2.0.4)