PT-2009-6447 · Zen Cart · Zen Cart
Published
2009-12-14
·
Updated
2009-12-15
·
CVE-2009-4323
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Zen Cart