zen cart 1.3.9f - Multiple Vulnerabilities

No description provided by source. Zen Cart v1.3.9f Multiple Remote Vulnerabilities Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components...

Zen Cart Web Shopping Cart 1.x autoload_func.php autoLoadConfig[999][0][loadFile] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19543/info Zen Cart is prone to multiple remote and local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote and local...

Zen Cart <= 1.2.6d (password_forgotten.php) SQL Injection Exploit

No description provided by source. ?php ---zencart126dxpl.php 19.42 02/12/2005 Zen-Cart = 1.2.6d blind SQL injection / remote commands execution coded by rgod site: http://rgod.altervista.org - this works with magicquotesgpc both on & off usage: launch from Apache, fill in requested fields, then...

Zen Cart 2008 - index.php keyword Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29020/info Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an...

Zen Cart <= 1.3.9h - Multiple Vulnerabilities

No description provided by source. ================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Catego...

SA-CONTRIB-2014-047 - Zen - Cross Site Scripting

The Zen theme is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. The theme does not properly sanitize theme settings before they are used in the output of a page. Themes that have copied code from Zen's template.php may suffer from this same issue. If you...

Zen Cart 开放重定向漏洞

Zen Cart是一款基于PHP的WEB应用程序。 通过"goto" GET参数提交给index.php的输入在重定向用户之前缺少校验，允许远程攻击者构建恶意URI，诱使用户解析，可重定向用户通信，进行网络钓鱼等攻击。 0 Zen Cart 1.5.1 目前没有详细解决方案提供： http://www.zen-cart.com/...

Zen Cart E-Commerce 1.5.1 XSS / Open Redirect / Shell Upload

============================================================== Title ...| Multiple vulnerabilities in Zen Cart e-commerce Version .| zen-cart-v1.5.1-full-fileset-09182012 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + For...

Zen Cart Multiple Vulnerabilities (Feb 2014)

Zen Cart is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Zen Cart <= 1.5.1 Information Disclosure Vulnerability

Zen Cart is prone to an information disclosure vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Zen-Cart Database Backup Disclosure

Zen-cart Database Backup Disclosure Vulnerability /+/ Exploit title : Zen-cart Database Backup Disclosure Vulnerability /+/ Script : Zen-cart /+/ Version : 1.5.1 /+/ Author : JoKeRStEx /+/ Date : 22/07/2013 /+/ Category : Webapps /+/ Google Dork : inurl:"/zcinstall/sql/" First You can Donwload...

Fedora Update for drupal7-theme-zen FEDORA-2013-15147

Check for the Version of drupal7-theme-zen OpenVAS Vulnerability Test Fedora Update for drupal7-theme-zen FEDORA-2013-15147 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora 18 : drupal7-theme-zen-5.4-1.fc18 (2013-15142)

Update to upstream 5.4 release for security and bug fixes - SA-CONTRIB-2013-070 https://drupal.org/node/2071157 - Upstream changelog for this release is available at https://drupal.org/node/2071055 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for drupal7-theme-zen FEDORA-2013-15142

Check for the Version of drupal7-theme-zen OpenVAS Vulnerability Test Fedora Update for drupal7-theme-zen FEDORA-2013-15142 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for drupal7-theme-zen FEDORA-2013-15147

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal7-theme-zen FEDORA-2013-15142

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 18 Update: drupal7-theme-zen-5.4-1.fc18

Zen is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. If you are building your own standards-compliant theme, you will find it much easier to start with Zen than to start with Garland or Stark. This theme has fantastic online documentation...

SA-CONTRIB-2013-070 - Zen - Cross Site Scripting

The Zen theme is a very popular base/starter theme. Zen doesn't sufficiently escape the breadcrumb separator field, allowing a possible XSS exploit. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer themes". CVE identifiers issued...

CVE-2012-5806

The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to...

CVE-2012-5807

The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...