EDB-24768
functionalSugarCRM 1.x/2.0 Module - 'record' SQL Injection
view exploit source exploit_dbverifiedtype webappsauthor GulfTech Securitypublished 2004-11-23catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-1225US | high10.0 | Exploit | ||
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a Detail… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan