Security SugarCRM 6.5.18 PHP Code Injection June 24, 2016 007admin Leave a comment SugarCRM versions 6.5.18 and below suffer from two PHP code injection vulnerabilities.