Fraud Ring Launders Money Via Fake Charity Donations

A money-laundering fraud ring is targeting donation sites, taking advantage of the outpouring of charity sparked by the global pandemic. Dubbed Cart Crasher by the Sift security firm, the fraud ring leverages guest checkout options on donation sites to steal money and launder stolen payment cards...

Zen Cart SQL Injection Vulnerability (CNVD-2021-22860)

Zen Cart is an open source, free shopping mall system , used to build a professional online store . An itrk-api.php rechtstextlanguage SQL injection vulnerability exists in the IT-Recht Kanzlei plugin in Zen Cart 1.5.6c. No details of the vulnerability are provided at this time...

Zen Cart Cross-Site Scripting Vulnerability (CNVD-2021-22861)

Zen Cart is open source, free mall system for building professional online stores. A reflective cross-site scripting vulnerability exists in Zen Cart 1.5.6d. An attacker can execute malicious script via the includes/templates/templatedefault/common/tplmainpage.php or...

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

CVE-2020-6578

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

CVE-2020-6578

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

Design/Logic Flaw

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

CVE-2020-6578

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

Sql injection

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

CVE-2020-6578

CVE-2020-6578 affects Zen Cart 1.5.6d and enables a reflected XSS via the main_page parameter in tpl_main_page.php (two paths: includes/templates/template_default/common/tpl_main_page.php and includes/templates/responsive_classic/common/tpl_main_page.php). Connected sources confirm the vulnerable...

CVE-2020-6578

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

CVE-2020-6577

CVE-2020-6577 affects Zen Cart 1.5.6c (German edition) via the IT-Recht Kanzlei plugin. The itrk-api.php rechtst_text_language parameter enables SQL Injection, allowing a remote attacker to execute arbitrary SQL commands on the affected system. The connected sources confirm the vulnerability exis...

Zen Ventures Zen Cart SQL注入漏洞

Zen Cart is an open source, free shopping mall system , used to build a professional online store . An itrk-api.php rechtstextlanguage SQL injection vulnerability exists in the IT-Recht Kanzlei plugin in Zen Cart 1.5.6c. No details of the vulnerability are provided at this time...

Zen Ventures Zen Cart 跨站脚本漏洞

Zen Cart is open source, free mall system for building professional online stores. A reflective cross-site scripting vulnerability exists in Zen Cart 1.5.6d. An attacker can execute malicious script via the includes/templates/templatedefault/common/tplmainpage.php or...

CVE-2020-29045

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdmcart cookie in loadcartfromcookie in includes/class-cart-manager.php...

Information disclosure

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdmcart cookie in loadcartfromcookie in includes/class-cart-manager.php...

Zen Cart 1.5.7b - Remote Code Execution (Authenticated)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit write payload in database and trig to command a bug in an zencart v1.5.7b web application class MetasploitModule 'zencart authenticated remote code executio...