Vulnerability Description
SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sugarcrm | Sugarcrm | <= 2.0.1c |
References
- http://marc.info/?l=bugtraq&m=110295433323795&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18447
- http://marc.info/?l=bugtraq&m=110295433323795&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18447
FAQ
What is CVE-2004-1226?
CVE-2004-1226 is a vulnerability with a CVSS score of 5.0 (MEDIUM). SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as...
How severe is CVE-2004-1226?
CVE-2004-1226 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-1226?
Check the references section above for vendor advisories and patch information. Affected products include: Sugarcrm Sugarcrm.