SugarCRM versions 6.5.23 and below suffer from a PHP object injection vulnerability. Continue reading...