exploitDog

CVE-2004-1227

Опубликовано: 10 янв. 2005

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sugarcrm:sugar_sales:*:*:*:*:*:*:*:*

Версия до 2.0.1c (включая)

EPSS

Процентиль: 87%

0.03534

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1227

debian

больше 20 лет назад

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and e ...

GHSA-gfv8-v4p2-qcf9

github

больше 3 лет назад

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.

EPSS

Процентиль: 87%

0.03534

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other