high7.5
CVE-2006-4218
Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory t…
Impact
Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zen Cart | Zen Cart | Versions 1.2.0d, 1.2.1_patch1, 1.2.1d, 1.2.2d, 1.2.3d, 1.2.4.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21484
- http://www.gulftech.org/?node=research&article_id=00109-08152006
- http://www.securityfocus.com/bid/19543
- http://www.vupen.com/english/advisories/2006/3283
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28395
- http://secunia.com/advisories/21484
- http://www.gulftech.org/?node=research&article_id=00109-08152006
- http://www.securityfocus.com/bid/19543
- http://www.vupen.com/english/advisories/2006/3283
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28395