high7.5
CVE-2004-2024
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain…
Impact
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zen Cart | Zen Cart | Version 1.1.4 |