Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2015-2595 Vulnerability (CVE-2015-2595)
WordPress Plugin SlideDeck 2 Lite Responsive Content Slider Cross-Site Scripting (2.3.18)
WordPress Plugin Import any XML or CSV File to WordPress Cross-Site Scripting (3.4.5)
WordPress Plugin MetaSlider Cross-Site Scripting (2.6.2)
Jenkins Improper Input Validation Vulnerability (CVE-2013-0331)