CVE-2004-1228

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative…

published December 15, 2004

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01164 · 66.8th percentile
Published
2004-12-15T05:00Z
EPSS history
Timeline
  • 15 DEC 05:00Z
    The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative…
    cvelistv5