Local File Disclosure in Zen Cart by Zen Cart Team
CVE-2009-4322

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
14 December 2009

What is CVE-2009-4322?

The Zen Cart application contains a vulnerability in the extras/ipn_test_return.php file that permits remote attackers to access sensitive information. By making direct requests, attackers can reveal the installation path of the application in the form of error messages. This poses a significant risk as it may lead to further exploitation of the system.

References

http://www.acunetix.com/blog/websecuritynews/acusensor-cu...
x_refsource_MISC
http://www.zen-cart.com/forum/showthread.php?t=142784
x_refsource_MISC
http://www.securityfocus.com/archive/1/508340/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.