$ cve CVE-2004-0261 JSON

CVE-2004-0261 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 4.8% (pctl 92)

Patch early

A public exploit exists.

oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	4.77% — more likely to be exploited than 92% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-11-23
Last modified	2026-06-16

Vendor	Product
openjournal	openjournal

Source	Title	Date
exploit-db	OpenJournal 2.0 - Authentication Bypassing	2004-02-06