Overview :
SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection.
Affected Product(s) :
  • SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9
Vulnerability Details :
CVE ID :CVE-2019-18784
The SuiteCRM specified versions are prone to SQLi vulnerability. Exploiting this issue allows attackers to do malfunctions according to the code

Solution :

Upgrade to SuiteCRM patched version