Sugar Sales
Approved changes feed: RSS · Atom
cpe:2.3:a:sugarcrm:sugar_sales:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sugarcrm (dd15fdac-9cd0-5ebf-98e7-767d21270f9e) |
|---|---|
| Product | Sugar Sales (8eadc377-6768-54fb-9935-83322175ba4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1228 |
vulnerable | 2026-06-08 04:47:53.382472 |
Details available
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:46:12.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1227 |
vulnerable | 2026-06-08 04:47:53.382105 |
Details available
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:46:12.380Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.