Skip to content
OpenAdvisories

Vendor

salesagility

40 known vulnerabilities.

Products

SuiteCRM 22 salesagility/suitecrm 14 salesagility/suitecrm-core 2 SuiteCRM-Core 2
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-36415

    SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in uploaded file verification in products allows for remote code execution. Versions 7.14.4 and 8.6.1 contain a fix for…

    salesagility SuiteCRM
  • Critical 10.0
    CVE-2024-36412 Scanner template

    SuiteCRM unauthenticated SQL Injection

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issu…

    salesagility SuiteCRM
  • Critical 9.6
    CVE-2024-36411

    SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax displayView controller. Versions 7.14.4 and 8.6.1 contain a fix for th…

    salesagility SuiteCRM
  • Critical 9.6
    CVE-2024-36410

    SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for…

    salesagility SuiteCRM
  • Critical 9.6
    CVE-2024-36409

    SuiteCRM authenticated SQL Injection in TreeData entrypoint

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

    salesagility SuiteCRM
  • Critical 9.6
    CVE-2024-36408

    SuiteCRM authenticated SQL Injection in Alerts

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in the `Alerts` controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

    salesagility SuiteCRM