Description SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection. References http://seclists.org/fulldisclosure/2020/Aug/9 http://packetstormsecurity.com/files/158848/SugarCRM-SQL-Injection.html https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-051/