medium6.5
CVE-2020-8804
SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.
Impact
SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | through 7.11.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156331/SuiteCRM-7.11.10-SQL-Injection.html
- http://seclists.org/fulldisclosure/2020/Feb/7
- https://suitecrm.com
- http://packetstormsecurity.com/files/156331/SuiteCRM-7.11.10-SQL-Injection.html
- http://seclists.org/fulldisclosure/2020/Feb/7
- https://suitecrm.com