medium5.8Public exploit code
CVE-2011-4403
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for request…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zen Cart 1.3.9h - '/path_to_admin/product.php' Cross-Site Request Forgery2012-02-10 · webapps · php · Verified
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disable a product via a setflag action to categories.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zen-Cart | Zen Cart | Version 1.3.9h |