Lucene search

K
cvelistMitreCVELIST:CVE-2004-2024
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2004-2024

2022-10-0316:14:15
mitre
www.cve.org
zen cart
admin password retrieval
debugging code
vulnerability
administrative privileges
password_forgotten.php

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.6%

The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.6%

Related for CVELIST:CVE-2004-2024