PT-2012-3240

Name of the Vulnerable Software and Affected Versions Zen Cart versions 1.5.0 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the db username parameter to "zc install/index.php". This occurs when the software is...