Sensitive Information Exposure in Zen Cart Installation by Zen Cart
CVE-2009-4323

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Vendor
CVE Published:
14 December 2009

What is CVE-2009-4323?

A critical vulnerability in the Zen Cart installation allows unauthorized access to sensitive information stored in the docs, extras, and zc_install directories. Additionally, the presence of the install.txt file poses a risk, enabling remote attackers to manipulate the system, potentially leading to data compromise and even database deletion. Proper configuration and timely updates are essential to mitigate these risks and enhance the security posture of Zen Cart installations.

References

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.