Cross-Site Scripting Flaw in Zen Cart from Zen Software
CVE-2008-6616
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-6616?
A Cross-Site Scripting (XSS) vulnerability exists in the index.php file of Zen Cart 2008, developed by Zen Software. This flaw enables remote attackers to inject arbitrary web scripts or HTML through the 'keyword' parameter on the advanced_search_result page. Exploiting this vulnerability could lead to unauthorized access to sensitive information or manipulation of user sessions.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.