PT-2006-5035 · Zen Cart · Zen Cart

Publicado 2006-08-17 · Atualizado 2017-07-20 · CVE-2006-4218

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zen Cart versions 1.3.0.2 and earlier

Description A directory traversal issue allows remote attackers to include and possibly execute arbitrary local files by using directory traversal sequences in the typefilter parameter.

Recommendations For Zen Cart versions 1.3.0.2 and earlier, consider restricting access to the typefilter parameter to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-4218

Produtos afetados

Zen Cart

Referências · 7

• 🔥 http://gulftech.org/?node=research&article_id=00109-08152006 · Exploit
• http://secunia.com/advisories/21484 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28395 · Nota
• http://vupen.com/english/advisories/2006/3283 · Nota
• http://securityfocus.com/bid/19543 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4218 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4218 · Nota de Segurança