Vulnerabilities > Improper Control of Generation of Code ('Code Injection')

DATE CVE VULNERABILITY TITLE RISK
2019-10-08 CVE-2018-21023 Code Injection vulnerability in Centreon web
getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.
network
low complexity
centreon CWE-94
8.8
2019-10-07 CVE-2019-17310 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.
network
low complexity
sugarcrm CWE-94
7.2
2019-10-07 CVE-2019-17309 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
network
low complexity
sugarcrm CWE-94
7.2
2019-10-07 CVE-2019-17308 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
network
low complexity
sugarcrm CWE-94
8.8
2019-10-07 CVE-2019-17307 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
network
low complexity
sugarcrm CWE-94
7.2
2019-10-07 CVE-2019-17306 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.
network
low complexity
sugarcrm CWE-94
7.2
2019-10-07 CVE-2019-17305 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.
network
low complexity
sugarcrm CWE-94
8.8
2019-10-07 CVE-2019-17304 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.
network
low complexity
sugarcrm CWE-94
7.2
2019-10-07 CVE-2019-17303 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
network
low complexity
sugarcrm CWE-94
8.8
2019-10-07 CVE-2019-17302 Code Injection vulnerability in Sugarcrm
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
network
low complexity
sugarcrm CWE-94
8.8