Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities

Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50787/info Zen Cart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. A...

Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50787/info Zen Cart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

Zen Media Player (.pls) Local Crash Poc

Exploit for windows platform in category dos / poc Exploit Title:Zen Media Player .pls Local Crash Poc Date: 20/8/2011 Author: Angel Injection home Page: http://www.club-h.co.cc , http://www.sec-krb.org Email: Angel-Injectionathotmail.com Category:: dos / poc Tested on: Windows Xp Sp3...

Zen Cart store system, upload, cross-site exploit-vulnerability warning-the black bar safety net

Zen Cart is open source, free Mall system, for establishing a professional online store. Zen Cart support multi-language, multi-currency, search engine optimization, bulk update, is the most secure online systems. Zen Cart = v1. 3. 9 presenceXSScross-site, script, upload, path disclosure, etc. of...

Zen Cart <= v1.3.9h Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on =...

Zen Cart 1.3.9h - Multiple Vulnerabilities

Zen Cart 1.3.9h - Multiple Vulnerabilities ================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack ...

Zen Cart 1.3.9f / 1.3.9h XSS / Disclosure / Shell Upload

================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Category = WebApps/0day Date = 18 May 2011 - 0day from 28 Sep 2010...

Zen Cart 1.3.9h - Multiple Vulnerabilities

================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Category = WebApps/0day Date = 18 May 201...

Zen Cart 'includes/initsystem.php' Local File Include Vulnerability

Zen Cart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

Zen Cart <= 1.3.9h LFI Vulnerability

Zen Cart is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Zen Cart 1.3.9h Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== Zen Cart 1.3.9h Local File Inclusion Vulnerability ================================================== Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore...

Zen Cart 1.3.9h Local File Inclusion

Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X. INDEX I. ABOUT THE APPLICATION II...

Zen Cart 1.3.9h Local File Inclusion Vulnerability

Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X. INDEX I. ABOUT THE APPLICATION II...

Zen Cart 1.3.9h - Local File Inclusion

Zen Cart 1.3.9h - Local File Inclusion Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X...

Zen Cart 1.3.9h - Local File Inclusion

Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X. INDEX I. ABOUT THE APPLICATION II...

zen cart 1.38 a multi-exploit-vulnerability warning-the black bar safety net

Vulnerability 1, The form id="frmUpload" enctype="multipart/form-data" action="" method="post" Upload a new file:br input type="file" name="NewFile" size="5 0"br input id="btnUpload" type="submit" value="Upload" /form We test under power. Directly to upload a PHP WEBSHELL to the IMAGES...

Zen Cart Multiple Input Validation Vulnerabilities

Zen Cart is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection, and HTML- injection issues. Exploiting these issues can allow attacker-supplied HTML and script code to run ...

Zen Cart <= 1.3.9f Multiple Vulnerabilities

Zen Cart is prone to multiple input validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file include, SQL injection, and HTML injection issues. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpt...

Zen Cart index.php typefilter Parameter Traversal Local File Inclusion

The installed version of Zen Cart does not validate user-supplied input to the 'typefilter' parameter of the 'index.php' script. An unauthenticated, remote attacker can leverage this issue to read arbitrary files on the remote web server with the permissions that the web server process runs with...

Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================ Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability ================================================================ Vendor: Zen Ventures, LLC Product web page:...