PT-2015-3480 · Zen Cart · Zen Cart

Disk0Nn3Ct · Publicado 2015-04-24 · Atualizado 2015-04-27 · CVE-2011-4403

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.3.9h

Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done through multiple cross-site request forgery (CSRF) vulnerabilities. Specifically, the vulnerabilities enable attackers to make requests that delete a product via a delete product confirm action to "product.php" or disable a product via a setflag action to "categories.php".

Recommendations For Zen Cart version 1.3.9h, consider disabling the delete product confirm action to "product.php" and the setflag action to "categories.php" as a temporary workaround until a patch is available. Restrict access to the "product.php" and "categories.php" files to minimize the risk of exploitation. Avoid using the delete product confirm and setflag actions in the affected API endpoints until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2011-4403

Produtos afetados

Zen Cart

Referências · 5

• 🔥 http://seclists.org/fulldisclosure/2012/Feb/171 · Exploit
• 🔥 https://exploit-db.com/exploits/36688 · Exploit
• http://osvdb.org/79137 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4403 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4403 · Nota de Segurança