CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

Sql injection

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

Design/Logic Flaw

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

CVE-2020-6578

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

CVE-2020-6578

CVE-2020-6578 affects Zen Cart 1.5.6d and enables a reflected XSS via the main_page parameter in tpl_main_page.php (two paths: includes/templates/template_default/common/tpl_main_page.php and includes/templates/responsive_classic/common/tpl_main_page.php). Connected sources confirm the vulnerable...

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

CVE-2020-6577

CVE-2020-6577 affects Zen Cart 1.5.6c (German edition) via the IT-Recht Kanzlei plugin. The itrk-api.php rechtst_text_language parameter enables SQL Injection, allowing a remote attacker to execute arbitrary SQL commands on the affected system. The connected sources confirm the vulnerability exis...

Zen Ventures Zen Cart 跨站脚本漏洞

Zen Cart is open source, free mall system for building professional online stores. A reflective cross-site scripting vulnerability exists in Zen Cart 1.5.6d. An attacker can execute malicious script via the includes/templates/templatedefault/common/tplmainpage.php or...

Zen Ventures Zen Cart SQL注入漏洞

Zen Cart is an open source, free shopping mall system , used to build a professional online store . An itrk-api.php rechtstextlanguage SQL injection vulnerability exists in the IT-Recht Kanzlei plugin in Zen Cart 1.5.6c. No details of the vulnerability are provided at this time...

Zen Cart 1.5.7b - Remote Code Execution (Authenticated)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit write payload in database and trig to command a bug in an zencart v1.5.7b web application class MetasploitModule 'zencart authenticated remote code executio...

Zen Cart Remote Code Execution Vulnerability

Zen Cart is an open source, free shopping mall system , used to build a professional online store . A remote code execution vulnerability exists in Zen Cart 1.5.7b. The vulnerability can be exploited by an administrator to execute arbitrary OS commands by inspecting HTML radio input elements and...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

Command injection

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3291

CVE-2021-3291 affects Zen Cart 1.5.7b. The vulnerability allows an authenticated admin to execute arbitrary OS commands by inspecting an HTML radio input element on the modules edit page and inserting a command. The provided connected documents describe the impact and PoC/exploit references but d...

Zen Cart 操作系统命令注入漏洞

Zen Cart is an open source, free shopping mall system , used to build a professional online store . A remote code execution vulnerability exists in Zen Cart 1.5.7b. The vulnerability can be exploited by an administrator to execute arbitrary OS commands by inspecting HTML radio input elements and...

[ASA-202010-3] linux-zen: multiple issues

Arch Linux Security Advisory ASA-202010-3 ========================================= Severity: High Date : 2020-10-18 CVE-ID : CVE-2020-12351 CVE-2020-12352 CVE-2020-24490 Package : linux-zen Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1249 Summary ======= The...

Android Zen elevation of privilege vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. The Android-11 version has a security vulnerability that stems from an insecure implicit hang in Zen, which can be exploited by an attacker to elevate local privileges...