Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2021-45899

Disclosure Date: January 28, 2022 (last updated February 23, 2025)
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.
Attacker Value
Unknown

CVE-2021-45898

Disclosure Date: January 28, 2022 (last updated October 07, 2023)
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.
Attacker Value
Unknown

CVE-2021-45897

Disclosure Date: January 28, 2022 (last updated October 07, 2023)
SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution.
Attacker Value
Unknown

CVE-2021-45041

Disclosure Date: December 19, 2021 (last updated February 23, 2025)
SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date.