VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Jun 16, 2026

CVE-2004-1228

CVE-2004-1228

Description

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Sugarcrm/Sugar Sales2 versions
    cpe:2.3:a:sugarcrm:sugar_sales:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sugarcrm:sugar_sales:*:*:*:*:*:*:*:*range: <=2.0.1c
    • (no CPE)range: <=2.0.1c

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.