PT-2006-1751 · Zen Cart · Zen Cart

Publicado 2006-02-15 · Atualizado 2013-01-03 · CVE-2006-0697

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 1.2.7

Description The issue is related to the lack of protection for the admin/includes directory, which could allow remote attackers to cause unknown impact. The attack vector is unspecified but is likely related to direct requests to the vulnerable directory.

Recommendations For versions prior to 1.2.7, update to version 1.2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/includes directory to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2006-0697

Produtos afetados

Zen Cart

Referências · 5

• http://vupen.com/english/advisories/2006/0546 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=392886 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-0697 · Nota de Segurança
• http://secunia.com/advisories/18801 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0697 · Nota