CVE-2017-5218

A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or viewed. This file crafts a SQL statement to identify the database that is to be in use with the current user's session. The database variable can be populated from the URL, and when supplied non-expected characters, can be manipulated to obtain access to the underlying database. The /CRM/CustomPages/ACCPAC/AP_DocumentUI.asp?SID=<VALID-SID>&database=1';WAITFOR DELAY '0:0:5'-- URI is a Proof of Concept.

• CWE-89

• http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/Third Party Advisory
• http://www.securityfocus.com/bid/95968Third Party Advisory, VDB Entry
• http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/Third Party Advisory
• http://www.securityfocus.com/bid/95968Third Party Advisory, VDB Entry

Published

Feb 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5212Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorre…
• CVE-2017-5213Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected…
• CVE-2017-5214The Codextrous B2J Contact (aka b2j_contact) extension befor…
• CVE-2017-5215The Codextrous B2J Contact (aka b2j_contact) extension befor…
• CVE-2017-5216Stack-based buffer overflow vulnerability in Netop Remote Co…
• CVE-2017-5217Installing a zero-permission Android application on certain …
• CVE-2017-5219An issue was discovered in SageCRM 7.x before 7.3 SP3. The C…
• CVE-2017-5223An issue was discovered in PHPMailer before 5.2.22. PHPMaile…
• CVE-2017-5225LibTIFF version 4.0.7 is vulnerable to a heap buffer overflo…8.8
• CVE-2017-5226When executing a program via the bubblewrap sandbox, the non…
• CVE-2017-5227QNAP QTS before 4.2.4 Build 20170313 allows local users to o…
• CVE-2017-5228All editions of Rapid7 Metasploit prior to version 4.13.0-20…