Zaireweb Solutions : Security Vulnerabilities, CVEs, CVSS score >= 6
admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.
Max CVSS
10.0
EPSS Score
5.19%
Published
2004-12-06
Updated
2017-07-11
1 vulnerabilities found