CVE-2004-1225

2005-01-10T05:00:00
ID CVE-2004-1225
Type cve
Reporter cve@mitre.org
Modified 2017-07-11T01:30:00

Description

SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.