Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2004-1228

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.3%
CVSS Severity
CVSS v2 Score 6.4
Products affected by CVE-2004-1228


Contact Us

Shodan ® - All rights reserved