CVE-2004-0261: Openjournal

High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days.

oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.

Affected products

• Openjournal Openjournal: version 2.0 only; version 2.0_1 only; version 2.0_2 only; version 2.0_3 only; version 2.0_4 only; version 2.0_5 only

Published 2004-11-23. Last modified 2026-06-16.