Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.

Remediation

References

CVE-2019-17294

Related Vulnerabilities

WordPress Plugin StreamCast-Radio Player for WordPress Cross-Site Scripting (2.1)

WebLogic CVE-2022-21292 Vulnerability (CVE-2022-21292)

Jboss EAP Resource Management Errors Vulnerability (CVE-2016-7046)

WordPress Plugin Contact Form Check Tester Cross-Site Scripting (1.0.2)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21014)

Severity

High

Classification

CVE-2019-17294 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities