Zen-Cart 1.3.0.2 Full Path Disclosure

Zen-Cart 1.3.0.2 En: Zen-Cart .. E-commerce PHP Program - This Bug Can Tell U Where The Program @ Server Ar: .. Full Path Disclosure :- /index.php?GET= /index.php?SESSION= /index.php?POST= /index.php?COOKIE= /index.php?SESSION= /------------------------------------------/...

Sql injection

SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection...

CVE-2006-0698

Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection...

CVE-2006-0696

SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests...

CVE-2006-0697

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests...

CVE-2006-0698

Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection...

CVE-2006-0698

CVE-2006-0698 affects Zen Cart prior to version 1.2.7. The vulnerability is described as unspecified vulnerabilities allowing remote attackers to cause unknown impact via unspecified vectors (other than SQL injection). The connected documents do not provide concrete exploit details, concrete root...

CVE-2006-0696

SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-0697

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests...

CVE-2006-0697

Zen Cart before 1.2.7 is affected by CVE-2006-0697 due to insufficient protection of the admin/includes directory. The vulnerability, described in the NVD entry, allows remote attackers to trigger unknown impact via unspecified vectors (likely direct requests) with a CVSS v2 base score of 10.0 (H...

CVE-2006-0696

Zen Cart SQL injection vulnerability (CVE-2006-0696) affects versions before 1.2.7. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. No exploit details are provided in the connected documents; remediation/patch information is not stated. If upgrading, v...

[SA18801] Zen Cart Unspecified SQL Injection Vulnerabilities

TITLE: Zen Cart Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18801 VERIFY ADVISORY: http://secunia.com/advisories/18801/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Zen Cart 1.x http://secunia.com/product/3488/ DESCRIPTION: A...

CVE-2005-3996

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...

CVE-2005-3997

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...

CVE-2005-3997

CVE-2005-3997 (Zen Cart) affects Zen Cart 1.2.6d and earlier. Under certain PHP configurations, remote attackers can obtain sensitive information by directly requesting files in admin/includes, leaking the web server path in error messages. Affected files include: graphs/banner_daily.php, graphs/...

CVE-2005-3996

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...

CVE-2005-3996

CVE-2005-3996 corresponds to a SQL injection vulnerability in Zen Cart’s admin/password_forgotten.php where the admin_email parameter is used in a database query without proper validation. Affected product/version: Zen Cart 1.2.6d and earlier. Impact described in multiple sources: remote attacker...

CVE-2005-3997

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...