CVE-2004-1227

2004-12-1505:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

Low

0.038 Low

EPSS

Percentile

91.9%

JSON

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via … (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.