CVE-2004-1226

SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which…

published December 15, 2004

CVSS
—
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01212 · 68.1th percentile
Published
2004-12-15T05:00Z
EPSS history
Timeline
  • 15 DEC 05:00Z
    SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which…
    cvelistv5