Vulnerabilities > CVE-2004-2024 - Unspecified vulnerability in ZEN Cart ZEN Cart 1.1.4
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |