CVE-2004-0621: Zaireweb Solutions Newsletter Zws

High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days.

admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.

Affected products

Published 2004-12-06. Last modified 2026-06-16.