CVE-2004-1227 | BDVDB-2026-7563 Detail

Description#

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=110295433323795&w=2
http://www.securityfocus.com/bid/11740
https://exchange.xforce.ibmcloud.com/vulnerabilities/18326
http://www.gulftech.org/?node=research&article_id=00053-120104

Exploit#

No public exploit known

History#

Version 12004-12-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.