Cross-Site Scripting Vulnerabilities in Zen Cart by Zen Cart Development Team
CVE-2011-4547

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
29 November 2011

What is CVE-2011-4547?

Multiple cross-site scripting (XSS) vulnerabilities exist in the Zen Cart application when debugging is enabled. Attackers can exploit these vulnerabilities by injecting arbitrary web scripts or HTML through specific parameters such as (1) main_page and (2) PATH_INFO, posing a significant risk to users and site integrity. Proper sanitization of user inputs and securing debugging modes are critical to preventing such vulnerabilities.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/71519
vdb-entryx_refsource_XF
https://www.dognaedis.com/vulns/DGS-SEC-9.html
x_refsource_MISC
http://www.securityfocus.com/bid/50787
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.