CVE-2014-5385
com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess passwords via a brute force attack.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0031 (0.3%)
Percentil: 54.0%
EPSS: 2026-05-06
Afecta
shopizer:shopizerDescripción técnica
com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess passwords via a brute force attack.
Publicada: 21/8/2014, 23:55:02
Última modificación: 6/5/2026, 22:30:45