Openjournal

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Openjournal records in CISA KEV

No Openjournal vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Openjournal · all components

TI-2004-00230 CVE-2004-0261 · GHSA-276f-pggp-38m8

MEDIUM 50

oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04766 Published 2004-09-01 No fix listed