Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zen-cart zen cart 1.3.8 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2009-4321
extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote malicious users to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.
Zen-cart Zen Cart 1.3.8a
Zen-cart Zen Cart 1.3.8
NA
CVE-2008-6878
Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and previous versions, when .htaccess is not supported, allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the _SESSION[language] par...
Zen Cart Zen Cart 1.3.8
Zen Cart Zen Cart 1.3.8a
NA
CVE-2008-6877
Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the loader_file parameter. NOTE: the vendor disputes ...
Zen Cart Zen Cart 1.3.8
Zen Cart Zen Cart 1.3.8a
NA
CVE-2009-2254
Zen Cart 1.3.8a, 1.3.8, and previous versions does not require administrative authentication for admin/sqlpatch.php, which allows remote malicious users to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of passw...
Zen-cart Zen Cart 1.2.1d
Zen-cart Zen Cart 1.3.6
Zen-cart Zen Cart
Zen-cart Zen Cart 1.1.3
Zen-cart Zen Cart 1.1.0
Zen-cart Zen Cart 1.3.7
Zen-cart Zen Cart 1.3.8
Zen-cart Zen Cart 1.2.0d
Zen-cart Zen Cart 1.2.4d
1 EDB exploit
NA
CVE-2008-6986
SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 up to and including 1.3.8a, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the products_id array pa...
Zen-cart Zen Cart 1.3.8a
Zen-cart Zen Cart 1.3.2
Zen-cart Zen Cart 1.3.0.2
Zen-cart Zen Cart 1.3.6
Zen-cart Zen Cart 1.3.7
Zen-cart Zen Cart 1.3.8
Zen-cart Zen Cart 1.3
Zen-cart Zen Cart 1.3.5
NA
CVE-2009-2255
Zen Cart 1.3.8a, 1.3.8, and previous versions does not require administrative authentication for admin/record_company.php, which allows remote malicious users to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO...
Zen-cart Zen Cart 1.2.1d
Zen-cart Zen Cart 1.3.6
Zen-cart Zen Cart
Zen-cart Zen Cart 1.1.3
Zen-cart Zen Cart 1.1.0
Zen-cart Zen Cart 1.3.7
Zen-cart Zen Cart 1.3.8
Zen-cart Zen Cart 1.2.0d
Zen-cart Zen Cart 1.2.4d
1 EDB exploit
NA
CVE-2008-6985
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 up to and including 1.3.8a, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the sh...
Zen-cart Zen Cart 1.3.8a
Zen-cart Zen Cart 1.3.2
Zen-cart Zen Cart 1.2.4.1
Zen-cart Zen Cart 1.2.1d
Zen-cart Zen Cart 1.2.3d
Zen-cart Zen Cart 1.3.6
Zen-cart Zen Cart 1.2.1 Patch1
Zen-cart Zen Cart 1.2.6d
Zen-cart Zen Cart 1.3.7
Zen-cart Zen Cart 1.3.8
Zen-cart Zen Cart 1.2.0d
Zen-cart Zen Cart 1.2.4d
Zen-cart Zen Cart 1.2.5d
Zen-cart Zen Cart 1.3
Zen-cart Zen Cart 1.2.2d
Zen-cart Zen Cart 1.3.5
1 EDB exploit
NA
CVE-2011-4567
Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart prior to 1.5 allows remote malicious users to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different ...
Zen-cart Zen Cart 1.3.8a
Zen-cart Zen Cart 1.3.2
Zen-cart Zen Cart 1.3.0.2
Zen-cart Zen Cart
Zen-cart Zen Cart 1.2.4.1
Zen-cart Zen Cart 1.2.1d
Zen-cart Zen Cart 1.2.3d
Zen-cart Zen Cart 1.3.6
Zen-cart Zen Cart 1.1.3
Zen-cart Zen Cart 1.1.0
Zen-cart Zen Cart 1.2.1
Zen-cart Zen Cart 1.2.6d
Zen-cart Zen Cart 1.3.7
Zen-cart Zen Cart 1.3.8
Zen-cart Zen Cart 1.2.0d
Zen-cart Zen Cart 1.2.4d
Zen-cart Zen Cart 1.2.5d
Zen-cart Zen Cart 1.3
Zen-cart Zen Cart 1.2.2d
Zen-cart Zen Cart 1.3.5
1 EDB exploit
NA
CVE-2012-1413
Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and previous versions, when the software is being installed, allows remote malicious users to inject arbitrary web script or HTML via the db_username para...
Zen-cart Zen Cart 1.3.8a
Zen-cart Zen Cart 1.3.2
Zen-cart Zen Cart 1.3.0.2
Zen-cart Zen Cart
Zen-cart Zen Cart 1.2.4.1
Zen-cart Zen Cart 1.2.1d
Zen-cart Zen Cart 1.2.3d
Zen-cart Zen Cart 1.3.6
Zen-cart Zen Cart 1.3.9h
Zen-cart Zen Cart 2008
Zen-cart Zen Cart 1.1.3
Zen-cart Zen Cart 1.1.0
Zen-cart Zen Cart 1.2.1
Zen-cart Zen Cart 1.2.1 Patch1
Zen-cart Zen Cart 1.2.6d
Zen-cart Zen Cart 1.3.7
Zen-cart Zen Cart 1.3.9
Zen-cart Zen Cart 1.3.8
Zen-cart Zen Cart 1.2.0d
Zen-cart Zen Cart 1.2.4d
Zen-cart Zen Cart 1.2.5d
Zen-cart Zen Cart 1.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started