Remote File Access Vulnerability in Admin Access With Levels Plugin in osCommerce 1.5.1

CVE-2004-2638 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.

Learn more about our Web Application Penetration Testing UK.