zen-cart zen cart 1.2.0d vulnerabilities and exploits

(subscribe to this query)

Zen Cart 1.3.8a, 1.3.8, and previous versions does not require administrative authentication for admin/record_company.php, which allows remote malicious users to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO...

Zen-cart Zen Cart 1.2.4d Zen-cart Zen Cart 1.2.1d Zen-cart Zen Cart 1.2.0d Zen-cart Zen Cart Zen-cart Zen Cart 1.3.8 Zen-cart Zen Cart 1.1.3 Zen-cart Zen Cart 1.1.0 Zen-cart Zen Cart 1.3.7 Zen-cart Zen Cart 1.3.6

1 EDB exploit

Zen Cart 1.3.8a, 1.3.8, and previous versions does not require administrative authentication for admin/sqlpatch.php, which allows remote malicious users to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of passw...

Zen-cart Zen Cart 1.3.6 Zen-cart Zen Cart 1.2.4d Zen-cart Zen Cart 1.1.3 Zen-cart Zen Cart 1.1.0 Zen-cart Zen Cart 1.2.1d Zen-cart Zen Cart 1.2.0d Zen-cart Zen Cart 1.3.7 Zen-cart Zen Cart Zen-cart Zen Cart 1.3.8

1 EDB exploit

Directory traversal vulnerability in Zen Cart 1.3.0.2 and previous versions allows remote malicious users to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.

Zen Cart Zen Cart 1.2.4.1 Zen Cart Zen Cart 1.2.4d Zen Cart Zen Cart 1.2.0d Zen Cart Zen Cart 1.2.5d Zen Cart Zen Cart 1.2.6d Zen Cart Zen Cart 1.2.1 Patch1 Zen Cart Zen Cart 1.2.1d Zen Cart Zen Cart 1.3.0.2 Zen Cart Zen Cart 1.2.2d Zen Cart Zen Cart 1.2.3d

Zen Cart prior to 1.2.7 does not protect the admin/includes directory, which allows remote malicious users to cause unknown impact via unspecified vectors, probably direct requests.

Zen-cart Zen Cart Zen-cart Zen Cart 1.2.5d Zen-cart Zen Cart 1.2.4d Zen-cart Zen Cart 1.2.3d Zen-cart Zen Cart 1.2.1d Zen-cart Zen Cart 1.2.1 Zen-cart Zen Cart 1.2.0d Zen-cart Zen Cart 1.1.3 Zen-cart Zen Cart 1.1.0 Zen-cart Zen Cart 1.2.4.1 Zen-cart Zen Cart 1.2.2d

SQL injection vulnerability in Zen Cart prior to 1.2.7 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Zen Cart Zen Cart 1.1.0 Zen Cart Zen Cart 1.2.1 Patch1 Zen Cart Zen Cart 1.2.1d Zen Cart Zen Cart 1.1.1d Zen Cart Zen Cart 1.2.2d Zen Cart Zen Cart 1.2.3d Zen Cart Zen Cart 1.1.2d Zen Cart Zen Cart 1.1.3d Zen Cart Zen Cart 1.2.4.1 Zen Cart Zen Cart 1.2.4d Zen Cart Zen Cart 1.1.4d Zen Cart Zen Cart 1.2.0d Zen Cart Zen Cart 1.2.5d Zen Cart Zen Cart 1.2.6d

Unspecified vulnerabilities in Zen Cart prior to 1.2.7 allow remote malicious users to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection.

Zen Cart Zen Cart 1.1.0 Zen Cart Zen Cart 1.2.2d Zen Cart Zen Cart 1.2.3d Zen Cart Zen Cart 1.1.1d Zen Cart Zen Cart 1.1.2d Zen Cart Zen Cart 1.2.4.1 Zen Cart Zen Cart 1.2.4d Zen Cart Zen Cart 1.1.3d Zen Cart Zen Cart 1.1.4d Zen Cart Zen Cart 1.2.5d Zen Cart Zen Cart 1.2.6d Zen Cart Zen Cart 1.2.0d Zen Cart Zen Cart 1.2.1 Patch1 Zen Cart Zen Cart 1.2.1d

Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 up to and including 1.3.8a, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the sh...

Zen-cart Zen Cart 1.2.4.1 Zen-cart Zen Cart 1.2.1d Zen-cart Zen Cart 1.3 Zen-cart Zen Cart 1.2.1 Patch1 Zen-cart Zen Cart 1.2.4d Zen-cart Zen Cart 1.2.3d Zen-cart Zen Cart 1.3.5 Zen-cart Zen Cart 1.3.8a Zen-cart Zen Cart 1.2.2d Zen-cart Zen Cart 1.2.0d Zen-cart Zen Cart 1.3.7 Zen-cart Zen Cart 1.3.6 Zen-cart Zen Cart 1.2.6d Zen-cart Zen Cart 1.2.5d Zen-cart Zen Cart 1.3.8 Zen-cart Zen Cart 1.3.2

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook