Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1225
cve-2004-1225
sql injection
sugarcrm
remote attackers
arbitrary sql commands
gain privileges
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.9 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.3%
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.
Affected configurations
Node
sugarcrmsugarcrmMatch1.0
ORsugarcrmsugarcrmMatch1.0f
ORsugarcrmsugarcrmMatch1.0g
ORsugarcrmsugarcrmMatch1.1
ORsugarcrmsugarcrmMatch1.1a
ORsugarcrmsugarcrmMatch1.1b
ORsugarcrmsugarcrmMatch1.1c
ORsugarcrmsugarcrmMatch1.1d
ORsugarcrmsugarcrmMatch1.1e
ORsugarcrmsugarcrmMatch1.1f
ORsugarcrmsugarcrmMatch1.5d
ORsugarcrmsugarcrmMatch2.0.1
ORsugarcrmsugarcrmMatch2.0.1a
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.9 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.3%
Related for CVE-2004-1225