CVE-2018-25435

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attackers can deactivate customer accounts via the admin interface by tricking users into visiting attacker-controlled pages...

CVE-2018-25435 ZeusCart 4.0 Deactivate Customer Accounts CSRF

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attackers can deactivate customer accounts via the admin interface by tricking users into visiting attacker-controlled pages...

CVE-2018-25435 ZeusCart 4.0 Deactivate Customer Accounts CSRF

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attackers can deactivate customer accounts via the admin interface by tricking users into visiting attacker-controlled pages...

CVE-2018-25435

CVE-2018-25435 describes a cross-site request forgery (CSRF) in ZeusCart 4.0 that allows an attacker to perform unauthorized admin actions on behalf of a victim. Specifically, by convincing a logged-in admin to visit attacker-controlled pages, requests to the regstatus endpoint with action=deny c...

PT-2026-45626

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attackers can deactivate customer accounts via the admin interface by tricking users into visiting attacker-controlled pages...

ZeusCart Cross-Site Request Forgery Vulnerability

ZeusCart is an e-commerce shopping cart system developed by ZeusCart Inc. Version 4.0 of ZeusCart contains a cross-site request forgeing vulnerability. This vulnerability stems from cross-site request forgery, allowing attackers to manipulate user behavior by tricking users into accessing pages...

EUVD-2015-2289

Malware in sbrugna...

EUVD-2014-3805

Malware in sbrugna...

EUVD-2010-5280

Malware in sbrugna...

EUVD-2015-2290

Malware in sbrugna...

EUVD-2008-5193

Malware in sbrugna...

MAL-2025-40965 Malicious code in zeuscart (npm)

The package zeuscart was found to contain malicious code...

Malicious code in zeuscart (npm)

The package zeuscart was found to contain malicious code...

CVE-2010-5322

Cross-site scripting XSS vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php...

CVE-2014-3868

Multiple SQL injection vulnerabilities in ZeusCart 4.x...

Sql injection

Multiple SQL injection vulnerabilities in ZeusCart 4.x...

CVE-2014-3868

CVE-2014-3868 affects the ZeusCart 4.x line with multiple SQL injection vulnerabilities . Exploitation is reported as remote over the network with low attack complexity and low privileges required (CVSS‑3.1: AV:N/AC:L/PR:L/UI:N). The CVSS 3.1 base score is 8.8 (HIGH) , and impacts include confide...

CVE-2014-3868

Multiple SQL injection vulnerabilities in ZeusCart 4.x...

Zeuscart 3.0 User Detail Disclosure

| Title : ZeusCart 3.0 User Detail Download Vulnerability | Author : indoushka | Dork : Powered by ZeusCart | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 65.0.132-bit | Download : http://zeuscart.com/...

ZeusCart 4.0 - Cross-Site Request Forgery (Deactivate Customer Accounts) Vulnerability

Exploit for php platform in category web applications Exploit Title: ZeusCart4.0 Deactivate Customer Accounts CSRF Exploit Author: mqt Vendor Homepage: http://http://www.zeuscart.com/ Version: Zeus Cart 4.0 CSRF 1. Vulnerability Description Due to the form not being validated, ZeusCart4.0 suffers...