← Database

CVE-2004-2023

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.

Affected Platforms

Zen Cart Zen Cart

Weakness Type

NVD-CWE-Other

References