Skip to contentZen-cart Zen Cart vulnerabilities
- zen cart cart, zen-cart zen cart +1 moreZen Cart findPluginAdminPage Local File Inclusion Remote Code Execution VulnerabilityCVE-2024-5762EPSS 71.6%8.1 High
- zen-cart zen cartReflected XSS in Zen Cart before 1.5.7aCVE-2020-6578Fix available6.1 Medium
- zen-cart zen cartZen Cart vulnerable to authenticated remote code executionCVE-2021-3291Public exploitFix availableEPSS 17.0%7.2 High
- zen-cart zen cartDirectory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and...CVE-2015-8352Public exploitEPSS 15.6%9.8 Critical
- zen-cart zen cartAuthenticated RCE in Zen Cart 1.5.5eCVE-2017-11675Fix available8.8 High
- zen-cart zen cartIn index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.CVE-2017-106676.1 Medium
- zen-cart zen cartZen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official...CVE-2017-88336.1 Medium
- zen-cart zen cartMultiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote...CVE-2011-4403Public exploit5.8 Medium
- zen-cart zen cartMultiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition)...CVE-2015-08824.3 Medium
- firstdata linkpoint, zen-cart zen cart +1 moreThe LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name...CVE-2012-58085.8 Medium
- lincolnloop authorize.net echeck module, zen-cart zen cart +1 moreThe Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a...CVE-2012-58075.8 Medium
- paypal payments pro, zen-cart zen cart +1 moreThe PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a...CVE-2012-58065.8 Medium
- zen-cart zen cart, paypal instant payment notification +1 moreThe PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a...CVE-2012-58055.8 Medium
- zen-cart zen cartCross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup...CVE-2012-14132.6 Low
- zen-cart zen cartCross-site scripting (XSS) vulnerability in includes/templates/template_default/templates...CVE-2011-4567Public exploit4.3 Medium
- zen-cart zen cartMultiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common...CVE-2011-45474.3 Medium
- zen-cart zen cartThe installation for Zen Cart stores sensitive information and insecure programs under the (1)...CVE-2009-43237.5 High
- zen-cart zen cartextras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information...CVE-2009-43225.0 Medium
- zen-cart zen cartextras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote...CVE-2009-43215.0 Medium
- zen-cart zen cartSQL injection vulnerability in the actionMultipleAddProduct function in includes/classes...CVE-2008-69866.8 Medium
- zen-cart zen cartMultiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0...CVE-2008-6985Public exploit6.8 Medium
- zen-cart zen cartZen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin...CVE-2009-2255Public exploitEPSS 31.0%6.8 Medium
- zen-cart zen cartZen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin...CVE-2009-2254Public exploitEPSS 10.9%7.5 High
- zen-cart zen cartCross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote...CVE-2008-6616Public exploit4.3 Medium
- zen-cart zen cartSQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to...CVE-2008-6615Public exploit7.5 High
- zen-cart zen cartZen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote...CVE-2006-069710.0 High
- zen-cart zen cartSQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows...CVE-2005-3996Public exploit5.1 Medium