CVE-2019-6506: SQL Injection
Published Apr 2, 2019
·Updated
SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection.
Affected Software
1 affected component
SalesAgility SuiteCRM=7.11.0
Event History
Apr 2, 2019
CVE Published
via MITRE·09:14 PM
Data Sourced
via MITRE·09:14 PM
Description
Data Sourced
via NVD·10:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6506?
CVE-2019-6506 is rated as a high severity vulnerability due to its potential for SQL injection.
2
What versions of SuiteCRM are affected by CVE-2019-6506?
CVE-2019-6506 affects SuiteCRM versions before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3.
3
How do I fix CVE-2019-6506?
To fix CVE-2019-6506, upgrade SuiteCRM to the latest versions 7.8.28, 7.10.15, or 7.11.3 or later.
4
What's the impact of not addressing CVE-2019-6506?
Failing to address CVE-2019-6506 could allow attackers to execute arbitrary SQL commands on the database.
5
How can I identify if I'm vulnerable to CVE-2019-6506?
You can identify vulnerability to CVE-2019-6506 by checking if your SuiteCRM version is older than the patched versions mentioned.