Cross-Site Scripting Vulnerability in Zen Cart by Zen Cart
CVE-2012-1413

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
27 May 2012

What is CVE-2012-1413?

A cross-site scripting vulnerability exists in the Zen Cart e-commerce platform during installation in version 1.5.0 and earlier. This flaw allows remote attackers to inject arbitrary web script or HTML code via the 'db_username' parameter in the 'header_php.php' file. If exploited, this vulnerability could lead to unauthorized access and manipulation of user data, potentially compromising the security of the web application and its users.

References

https://www.trustwave.com/spiderlabs/advisories/TWSL2012-...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.