Cross-Site Request Forgery in Zen Cart by Zen Cart
CVE-2011-4403

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
24 April 2015

What is CVE-2011-4403?

Zen Cart version 1.3.9h is prone to multiple cross-site request forgery vulnerabilities that could allow remote attackers to execute unauthorized commands on behalf of authenticated administrators. By leveraging these vulnerabilities, an attacker could potentially delete products or disable them without the victim's consent, significantly jeopardizing the integrity of the online store's product management.

References

http://seclists.org/fulldisclosure/2012/Feb/171
mailing-listx_refsource_FULLDISC
http://osvdb.org/79137
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.