CVE-2004-2023

HIGH 7.5CVE-2004-2023 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2023 is a HIGH (CVSS 7.5) vulnerability affecting zen cart (zen cart).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
zen cart zen_cart	`= 1.1.2d= 1.1.4`	No fix yet

Description

SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.

References

marc.info
secunia.com/advisories/11649 · Patch
securitytracker.com/id
osvdb.org/6298
packetstormsecurity.org/0405-advisories/zencart112d.txt
securityfocus.com/archive/1/434237/30/4950/threaded
securityfocus.com/bid/10378
zen-cart.com/modules/ipb/index.php · Vendor Advisory
zen-cart.com/modules/mydownloads/viewcat.php · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/16176

More vulnerabilities in zen cart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

zen cart

zen_cart

= 1.1.2d= 1.1.4

No fix yet

More vulnerabilities in zen cart

See all →