CVE-2017-14508

CVE-2017-14508 is a SQL injection vulnerability affecting SugarCRM versions prior to 7.7.2.3, 7.8.2.2, and 7.9.2.0, as well as Sugar Community Edition 6.5.26. An authenticated attacker could exploit this by sending crafted SQL requests to the Documents and Emails modules, specifically demonstrated by manipulating the bean_id in modules/Emails/DetailView.php. This vulnerability carries a CVSS v3 score of 8.8 (High), indicating a network-based attack with low complexity and requiring low privileges, potentially leading to high impact on confidentiality, integrity, and availability of the database. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.