Zen Cart 1.6.0

CPE Details

Zen Cart 1.6.0
zen-cart
zen_cart
1.6.0
2017-05-30
16h33 +00:00
2017-05-30
16h33 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:zen-cart:zen_cart:1.6.0:*:*:*:*:*:*:*

Informations

Vendor

zen-cart

Product

zen_cart

Version

1.6.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2017-10667 2017-06-29 00h00 +00:00 In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.
6.1
Medium
CVE-2017-8833 2017-05-08 04h10 +00:00 Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."
6.1
Medium
CVE-2012-1413 2012-05-27 19h00 +00:00 Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the db_username parameter to zc_install/index.php.
2.6
CVE-2009-4323 2009-12-14 23h00 +00:00 The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322.
7.5
CVE-2009-4322 2009-12-14 22h00 +00:00 extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
5