Directory Traversal Vulnerability in Zen Cart by Zen Cart
CVE-2008-6877

Currently unrated

Key Information:

Vendor: Zen Cart
Status: Zen Cart
Vendor: CVE Published:; 27 July 2009

What is CVE-2008-6877?

A directory traversal vulnerability exists in the admin/includes/initsystem.php file of Zen Cart versions 1.3.8 and 1.3.8a. When .htaccess is not supported, this flaw allows remote attackers to exploit the loader_file parameter and include arbitrary local files. Although the vendor contends that this issue primarily discloses local file paths rather than leading to more severe exploits, the potential for unauthorized access to sensitive local files poses significant security risks for users of the affected versions.

References

http://secunia.com/advisories/31039

third-party-advisoryx_refsource_SECUNIA

http://www.attrition.org/pipermail/vim/2008-July/002028.html

mailing-listx_refsource_VIM

http://osvdb.org/46912

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 27, 2009
Vulnerability Reserved
Jul 27, 2009

CVE-2008-6877 Data

JSON