Zen-cart vulnerabilities

Products

• Zen Cart 27

Newest

• zen cart cart, zen-cart zen cart +1 more Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability CVE-2024-5762 EPSS 71.6% 8.1 HighAugust 21, 2024
• zen-cart zen cart Reflected XSS in Zen Cart before 1.5.7a CVE-2020-6578 Fix available 6.1 MediumMarch 19, 2021
• zen-cart zen cart Zen Cart vulnerable to authenticated remote code execution CVE-2021-3291 Public exploitFix available EPSS 17.0% 7.2 HighJanuary 26, 2021
• zen-cart zen cart Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and... CVE-2015-8352 Public exploit EPSS 15.6% 9.8 CriticalAugust 24, 2017
• zen-cart zen cart Authenticated RCE in Zen Cart 1.5.5e CVE-2017-11675 Fix available 8.8 HighJuly 27, 2017
• zen-cart zen cart In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS. CVE-2017-10667 6.1 MediumJune 29, 2017
• zen-cart zen cart Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official... CVE-2017-8833 6.1 MediumMay 8, 2017
• zen-cart zen cart Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote... CVE-2011-4403 Public exploit 5.8 MediumApril 24, 2015
• zen-cart zen cart Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition)... CVE-2015-0882 4.3 MediumFebruary 27, 2015
• firstdata linkpoint, zen-cart zen cart +1 more The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name... CVE-2012-5808 5.8 MediumNovember 4, 2012
• lincolnloop authorize.net echeck module, zen-cart zen cart +1 more The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a... CVE-2012-5807 5.8 MediumNovember 4, 2012
• paypal payments pro, zen-cart zen cart +1 more The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a... CVE-2012-5806 5.8 MediumNovember 4, 2012
• zen-cart zen cart, paypal instant payment notification +1 more The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a... CVE-2012-5805 5.8 MediumNovember 4, 2012
• zen-cart zen cart Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup... CVE-2012-1413 2.6 LowMay 27, 2012
• zen-cart zen cart Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates... CVE-2011-4567 Public exploit 4.3 MediumNovember 29, 2011
• zen-cart zen cart Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common... CVE-2011-4547 4.3 MediumNovember 29, 2011
• zen-cart zen cart The installation for Zen Cart stores sensitive information and insecure programs under the (1)... CVE-2009-4323 7.5 HighDecember 14, 2009
• zen-cart zen cart extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information... CVE-2009-4322 5.0 MediumDecember 14, 2009
• zen-cart zen cart extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote... CVE-2009-4321 5.0 MediumDecember 14, 2009
• zen-cart zen cart SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes... CVE-2008-6986 6.8 MediumAugust 18, 2009
• zen-cart zen cart Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0... CVE-2008-6985 Public exploit 6.8 MediumAugust 18, 2009
• zen-cart zen cart Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin... CVE-2009-2255 Public exploit EPSS 31.0% 6.8 MediumJune 30, 2009
• zen-cart zen cart Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin... CVE-2009-2254 Public exploit EPSS 10.9% 7.5 HighJune 30, 2009
• zen-cart zen cart Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote... CVE-2008-6616 Public exploit 4.3 MediumApril 6, 2009
• zen-cart zen cart SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to... CVE-2008-6615 Public exploit 7.5 HighApril 6, 2009
• zen-cart zen cart Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote... CVE-2006-0697 10.0 HighFebruary 15, 2006
• zen-cart zen cart SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows... CVE-2005-3996 Public exploit 5.1 MediumDecember 5, 2005