CVE-2004-1225: SQL Injection
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1225?
CVE-2004-1225 is considered a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2004-1225?
To fix CVE-2004-1225, you should update your SugarCRM installation to version 2.0.1a or later that addresses this SQL injection vulnerability.
What systems are affected by CVE-2004-1225?
CVE-2004-1225 affects multiple versions of SugarCRM, specifically versions prior to 2.0.1a, including 1.0 to 1.5d.
What type of vulnerability is CVE-2004-1225?
CVE-2004-1225 is an SQL injection vulnerability that allows malicious input to modify SQL queries executed by the database.
Can CVE-2004-1225 lead to data breaches?
Yes, CVE-2004-1225 can lead to significant data breaches, as attackers can gain unauthorized access and privileges to the database.