CVE-2004-2023

概要

参考情報

• marc.info
• secunia.com/advisories/11649 · Patch
• securitytracker.com/id
• osvdb.org/6298
• packetstormsecurity.org/0405-advisories/zencart112d.txt
• securityfocus.com/archive/1/434237/30/4950/threaded
• securityfocus.com/bid/10378
• zen-cart.com/modules/ipb/index.php · Vendor Advisory
• zen-cart.com/modules/mydownloads/viewcat.php · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/16176

zen cart のその他の脆弱性

• CVE-2008-6878中 6.8Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supp…
• CVE-2008-6877中 6.8Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows rem…
• CVE-2007-3597高 8.5Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter.
• CVE-2006-5119中 4.0Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the …
• CVE-2006-4218高 7.5Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local fi…