Description
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.
Unscored
CVE-2004-2024
EUVD-2004-2016GHSA-xc66-h8vr-gh7j
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allo…
Published May 10, 2005 · Updated Sep 16, 2024 · Assigned by mitre