Security SugarCRM 6.5.23 SugarRestSerialize.php PHP Object Injection June 24, 2016 007admin Leave a comment SugarCRM versions 6.5.23 and below suffer from a PHP object injection vulnerability.