CVE-2019-25663: SuiteCRM 7.10.7 SQL Injection via parentTab Parameter
SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter. Attackers can send GET requests to the email module with malicious parentTab values using boolean-based SQL injection techniques to extract sensitive database information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25663?
CVE-2019-25663 is considered a high severity vulnerability due to its potential for SQL injection attacks.
How can I fix CVE-2019-25663?
To fix CVE-2019-25663, upgrade SuiteCRM to version 7.10.8 or later where the vulnerability is addressed.
What systems are affected by CVE-2019-25663?
CVE-2019-25663 affects SuiteCRM version 7.10.7 specifically.
What type of attack is associated with CVE-2019-25663?
CVE-2019-25663 is associated with SQL injection attacks that allow unauthorized access to the database.
Is authentication required to exploit CVE-2019-25663?
Yes, CVE-2019-25663 requires an authenticated attacker to exploit the SQL injection vulnerability.