File Inclusion Vulnerability in Zen Cart by Zen Cart
CVE-2009-4321

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
14 December 2009

What is CVE-2009-4321?

A vulnerability has been identified in Zen Cart where the curltest.php script can be exploited by remote attackers to read arbitrary files from the server using a crafted file:// URI. This can lead to unauthorized access to sensitive information and poses significant security risks for affected users. It is advised to review your Zen Cart installations, particularly versions 1.3.8 and 1.3.8a, and apply any necessary patches or updates to mitigate the risks associated with this vulnerability.

References

http://www.vupen.com/english/advisories/2009/3474
vdb-entryx_refsource_VUPEN
http://osvdb.org/60892
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/37283
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.