CVE-2004-1226 | BDVDB-2026-7562 Detail

Description#

SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=110295433323795&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/18447

Exploit#

No public exploit known

History#

Version 12004-12-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.