CVE-2004-1228 | BDVDB-2026-7564 Detail

Description#

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=110295433323795&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/18449

Exploit#

No public exploit known

History#

Version 12004-12-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.