CVE-2004-1225
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.
Affected Platforms (CPE)
📦
Sugarcrm
Sugarcrm
= 1.0📦
Sugarcrm
Sugarcrm
= 1.0f📦
Sugarcrm
Sugarcrm
= 1.0g📦
Sugarcrm
Sugarcrm
= 1.1📦
Sugarcrm
Sugarcrm
= 1.1a📦
Sugarcrm
Sugarcrm
= 1.1b📦
Sugarcrm
Sugarcrm
= 1.1c📦
Sugarcrm
Sugarcrm
= 1.1d📦
Sugarcrm
Sugarcrm
= 1.1e📦
Sugarcrm
Sugarcrm
= 1.1f📦
Sugarcrm
Sugarcrm
= 1.5d📦
Sugarcrm
Sugarcrm
= 2.0.1📦
Sugarcrm