Cross-Site Scripting Vulnerabilities in Zen Cart Japanese Edition
CVE-2015-0882

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
27 February 2015

What is CVE-2015-0882?

Multiple cross-site scripting (XSS) vulnerabilities exist in the Zen Cart Japanese edition, affecting versions 1.3 jp (up to 1.3.0.2 jp8) and 1.5 ja (up to 1.5.1 ja). These vulnerabilities enable remote attackers to craft and inject malicious web scripts or HTML by exploiting specific parameters, particularly related to the initialization scripts in admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.

References

http://jvn.jp/en/jp/JVN44544694/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000027
third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN44544694/281242/index.html
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.