CVE-2006-3757

Description

References

• securityreason.com/securityalert/1253
• securityfocus.com/archive/1/438805/100/200/threaded

More vulnerabilities in zen cart

• CVE-2008-6878MEDIUM 6.8Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supp…
• CVE-2008-6877MEDIUM 6.8Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows rem…
• CVE-2007-3597HIGH 8.5Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter.
• CVE-2006-5119MEDIUM 4.0Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the …
• CVE-2006-4218HIGH 7.5Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local fi…