Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zen-cart zen cart 1.1.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-2254
Zen Cart 1.3.8a, 1.3.8, and previous versions does not require administrative authentication for admin/sqlpatch.php, which allows remote malicious users to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of passw...
Zen-cart Zen Cart 1.3.6Zen-cart Zen Cart 1.2.4dZen-cart Zen Cart 1.1.3Zen-cart Zen Cart 1.1.0Zen-cart Zen Cart 1.2.1dZen-cart Zen Cart 1.2.0dZen-cart Zen Cart 1.3.7Zen-cart Zen CartZen-cart Zen Cart 1.3.8
6.8
CVSSv2
CVE-2009-2255
Zen Cart 1.3.8a, 1.3.8, and previous versions does not require administrative authentication for admin/record_company.php, which allows remote malicious users to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO...
Zen-cart Zen Cart 1.2.4dZen-cart Zen Cart 1.2.1dZen-cart Zen Cart 1.2.0dZen-cart Zen CartZen-cart Zen Cart 1.3.8Zen-cart Zen Cart 1.1.3Zen-cart Zen Cart 1.1.0Zen-cart Zen Cart 1.3.7Zen-cart Zen Cart 1.3.6
10
CVSSv2
CVE-2006-0697
Zen Cart prior to 1.2.7 does not protect the admin/includes directory, which allows remote malicious users to cause unknown impact via unspecified vectors, probably direct requests.
Zen-cart Zen CartZen-cart Zen Cart 1.2.5dZen-cart Zen Cart 1.2.4dZen-cart Zen Cart 1.2.3dZen-cart Zen Cart 1.2.1dZen-cart Zen Cart 1.2.1Zen-cart Zen Cart 1.2.0dZen-cart Zen Cart 1.1.3Zen-cart Zen Cart 1.1.0Zen-cart Zen Cart 1.2.4.1Zen-cart Zen Cart 1.2.2d
4.3
CVSSv2
CVE-2011-4567
Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart prior to 1.5 allows remote malicious users to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different ...
Zen-cart Zen Cart 1.3.6Zen-cart Zen Cart 1.3.5Zen-cart Zen Cart 1.2.4.1Zen-cart Zen Cart 1.2.2dZen-cart Zen Cart 1.1.3Zen-cart Zen Cart 1.1.0Zen-cart Zen Cart 1.2.1Zen-cart Zen Cart 1.3.7Zen-cart Zen Cart 1.3.8Zen-cart Zen CartZen-cart Zen Cart 1.2.4dZen-cart Zen Cart 1.2.0dZen-cart Zen Cart 1.3.0.2Zen-cart Zen Cart 1.3.2Zen-cart Zen Cart 1.2.5dZen-cart Zen Cart 1.2.3dZen-cart Zen Cart 1.3Zen-cart Zen Cart 1.3.8aZen-cart Zen Cart 1.2.1dZen-cart Zen Cart 1.2.6d
2.6
CVSSv2
CVE-2012-1413
Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and previous versions, when the software is being installed, allows remote malicious users to inject arbitrary web script or HTML via the db_username para...
Zen-cart Zen Cart 1.3.9Zen-cart Zen Cart 1.2.3dZen-cart Zen Cart 1.3.7Zen-cart Zen Cart 1.3.0.2Zen-cart Zen Cart 1.3.2Zen-cart Zen CartZen-cart Zen Cart 1.2.1Zen-cart Zen Cart 1.2.6dZen-cart Zen Cart 1.3.6Zen-cart Zen Cart 1.2.4dZen-cart Zen Cart 1.1.3Zen-cart Zen Cart 2008Zen-cart Zen Cart 1.3.9hZen-cart Zen Cart 1.2.1dZen-cart Zen Cart 1.3.5Zen-cart Zen Cart 1.2.1 Patch1Zen-cart Zen Cart 1.2.4.1Zen-cart Zen Cart 1.2.2dZen-cart Zen Cart 1.2.5dZen-cart Zen Cart 1.2.0dZen-cart Zen Cart 1.3Zen-cart Zen Cart 1.3.8a
7.5
CVSSv2
CVE-2004-2025
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote malicious users to execute arbitrary SQL commands via the products_id parameter.
Zen Cart Zen Cart 1.1.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook