PT-2009-6447 · Zen Cart · Zen Cart

Publicado 2009-12-14 · Atualizado 2009-12-15 · CVE-2009-4323

Mitre

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322.

Correção

Identificadores relacionados

CVE-2009-4323

Produtos afetados

Zen Cart

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2009-4323 · Nota de Segurança
• http://zen-cart.com/forum/showthread.php?t=142784 · Aviso do Fabricante