Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-1227
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1227

2005-01-1005:00:00
[email protected]
web.nvd.nist.gov
53
cve-2004-1227
sugarcrm
sugar sales
vulnerability
remote attackers
arbitrary files
php code
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.038 Low

EPSS

Percentile

91.9%

JSON

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via … (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.

Affected configurations

NVD
Node
sugarcrmsugar_salesRange≤2.0.1c

Related

cvelist 1
nvd 1
packetstorm 1
securityvulns 1
cvelist
cvelist
CVE-2004-1227
2004-12-15 05:00:00
nvd
nvd
CVE-2004-1227
2005-01-10 05:00:00
packetstorm
packetstorm
Hardened-PHP Project Security Advisory 2005-23.105
2005-11-30 00:00:00
securityvulns
securityvulns
[Full-disclosure] Advisory 23/2005: vTiger multiple vulnerabilities
2005-11-25 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.038 Low

EPSS

Percentile

91.9%

JSON
Related for CVE-2004-1227
cvelist1nvd1packetstorm1securityvulns1