CVE-2011-4547

Multiple cross-site scripting XSS vulnerabilities in includes/templates/templatedefault/common/tplheadertestinfo.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the 1 mainpage parameter or 2 PATHINFO, a different...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in includes/templates/templatedefault/common/tplheadertestinfo.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the 1 mainpage parameter or 2 PATHINFO, a different...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/templates/templatedefault/templates/tplgvsenddefault.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gvsend action to index.php, a different vulnerability than CVE-2011-4547...

CVE-2011-4547

Multiple cross-site scripting XSS vulnerabilities in includes/templates/templatedefault/common/tplheadertestinfo.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the 1 mainpage parameter or 2 PATHINFO, a different...

CVE-2011-4567

Cross-site scripting XSS vulnerability in includes/templates/templatedefault/templates/tplgvsenddefault.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gvsend action to index.php, a different vulnerability than CVE-2011-4547...

CVE-2011-4547

CVE-2011-4547 covers multiple cross-site scripting (XSS) vulnerabilities in Ze n Cart 1.3.9h. The issues affect includes/templates/template_default/common/tpl_header_test_info.php when debugging is enabled, enabling an attacker to inject arbitrary script/HTML via the (1) main_page parameter or (2...

CVE-2011-4567

The CVE-2011-4567 entry details a Cross‑site Scripting (XSS) vulnerability in Zen Cart, specifically in includes/templates/template_default/templates/tpl_gv_send_default.php, exploitable by injecting arbitrary script/HTML through the message parameter in a gv_send action to index.php. Affected ve...

Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities

Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50787/info Zen Cart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. A...

Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50787/info Zen Cart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

Zen Media Player (.pls) Local Crash Poc

Exploit for windows platform in category dos / poc Exploit Title:Zen Media Player .pls Local Crash Poc Date: 20/8/2011 Author: Angel Injection home Page: http://www.club-h.co.cc , http://www.sec-krb.org Email: Angel-Injectionathotmail.com Category:: dos / poc Tested on: Windows Xp Sp3...

Zen Cart store system, upload, cross-site exploit-vulnerability warning-the black bar safety net

Zen Cart is open source, free Mall system, for establishing a professional online store. Zen Cart support multi-language, multi-currency, search engine optimization, bulk update, is the most secure online systems. Zen Cart = v1. 3. 9 presenceXSScross-site, script, upload, path disclosure, etc. of...

Zen Cart <= v1.3.9h Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on =...

Zen Cart 1.3.9h - Multiple Vulnerabilities

Zen Cart 1.3.9h - Multiple Vulnerabilities ================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack ...

Zen Cart 1.3.9h - Multiple Vulnerabilities

================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart - http://www.zen-cart.com Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Category = WebApps/0day Date = 18 May 201...

Zen Cart 1.3.9f / 1.3.9h XSS / Disclosure / Shell Upload

================================================================== Multiple Vulnerabilities in Zen Cart Vendor SW = Zen Cart Version = 1.3.9f, 1.3.9h but possible all versions Vendor URL = www.zen-cart.com Tested on = BackTrack 4 Category = WebApps/0day Date = 18 May 2011 - 0day from 28 Sep 2010...

Zen Cart 1.3.9h Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== Zen Cart 1.3.9h Local File Inclusion Vulnerability ================================================== Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore...

Zen Cart 'includes/initsystem.php' Local File Include Vulnerability

Zen Cart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

Zen Cart <= 1.3.9h LFI Vulnerability

Zen Cart is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Zen Cart 1.3.9h Local File Inclusion Vulnerability

Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X. INDEX I. ABOUT THE APPLICATION II...

Zen Cart 1.3.9h Local File Inclusion

Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X. INDEX I. ABOUT THE APPLICATION II...