PT-2006-1751 · Zen Cart · Zen Cart

Published 2006-02-15 · Updated 2013-01-03 · CVE-2006-0697

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 1.2.7

Description The issue is related to the lack of protection for the admin/includes directory, which could allow remote attackers to cause unknown impact. The attack vector is unspecified but is likely related to direct requests to the vulnerable directory.

Recommendations For versions prior to 1.2.7, update to version 1.2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/includes directory to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2006-0697

Affected Products

Zen Cart

References · 5

• http://sourceforge.net/project/shownotes.php?release_id=392886 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0697 · Security Note
• http://secunia.com/advisories/18801 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0546 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0697 · Note