PT-2015-3480 · Zen Cart · Zen Cart

Disk0Nn3Ct · Published 2015-04-24 · Updated 2015-04-27 · CVE-2011-4403

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.3.9h

Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done through multiple cross-site request forgery (CSRF) vulnerabilities. Specifically, the vulnerabilities enable attackers to make requests that delete a product via a delete product confirm action to "product.php" or disable a product via a setflag action to "categories.php".

Recommendations For Zen Cart version 1.3.9h, consider disabling the delete product confirm action to "product.php" and the setflag action to "categories.php" as a temporary workaround until a patch is available. Restrict access to the "product.php" and "categories.php" files to minimize the risk of exploitation. Avoid using the delete product confirm and setflag actions in the affected API endpoints until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2011-4403

Affected Products

Zen Cart

References · 5

• 🔥 http://seclists.org/fulldisclosure/2012/Feb/171 · Exploit
• 🔥 https://exploit-db.com/exploits/36688 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4403 · Security Note
• http://osvdb.org/79137 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4403 · Note