SugarCRM versions 6.5.18 and below suffer from two PHP code injection vulnerabilities. Continue reading...