CVE-2004-2024

概要

参考情報

• zen-cart.com/modules/ipb/index.php · Vendor Advisory
• zen-cart.com/modules/mydownloads/viewcat.php · Patch

zen cart のその他の脆弱性

• CVE-2008-6878中 6.8Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supp…
• CVE-2008-6877中 6.8Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows rem…
• CVE-2007-3597高 8.5Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter.
• CVE-2006-5119中 4.0Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the …
• CVE-2006-4218高 7.5Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local fi…