Filter
AND
SugarCRMAuthenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM
5.4
First published (updated )
SugarCRMAuthenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM
8.8
First published (updated )
SugarCRMImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SugarCRMAuthenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM
8.8
First published (updated )
SugarCRMSuiteCRM has wrong deletion permission checks on API delete call
7.7
First published (updated )
SugarCRMSuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SugarCRMSuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution
9.1
First published (updated )
SugarCRMSuiteCRM authenticated Server-Side Request Forgery
7.7
First published (updated )
SugarCRMSuiteCRM authenticated Reflected Cross-Site Scripting
8.9
First published (updated )
SugarCRMSuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller
9.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SugarCRMSuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller
9.6
First published (updated )
SugarCRMSuiteCRM authenticated SQL Injection in TreeData entrypoint
9.6
First published (updated )
SugarCRMSuiteCRM authenticated SQL Injection in Alerts
9.6
First published (updated )
SugarCRMSuiteCRM unauthenticated user password reset on php7
6.5
First published (updated )
SugarCRMCross-site Scripting (XSS) - Stored in salesagility/suitecrm-core
7.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SugarCRMSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code…
9.8
First published (updated )
SugarCRMSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.
9.8
First published (updated )
SugarCRMSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution.
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.