CVE-2006-4218

Zen Cart prior to 1.3.0.2 is affected by a directory traversal vulnerability that allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter. Impact is described as partial confidentiality, integrity, and availabilit...