cve/cves/2004/CVE-2004-1227.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-23 16:35:19 +00:00

Files

T

0xMarcio 81017c9871 Expand CVE PoC coverage and metadata

2026-09-01 19:01:07 +02:00

836 B

Raw Permalink Blame History

CVE-2004-1227

Description

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/24769

836 B Raw Permalink Blame History