high7.2
CVE-2019-17309
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
Impact
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sugarcrm | Sugarcrm | from 7.9.0.0 before 7.9.5.0 from 8.0.0 before 8.0.4 from 9.0.0 before 9.0.2 |