CVE-2005-3996

概要

参考情報

• rgod.altervista.org/zencart_126d_xpl.html
• secunia.com/advisories/17869 · Vendor Advisory
• securitytracker.com/id
• osvdb.org/21411 · Exploit
• securityfocus.com/archive/1/418517/100/0/threaded
• securityfocus.com/archive/1/418995/100/0/threaded
• securityfocus.com/bid/15690 · Exploit
• vupen.com/english/advisories/2005/2728 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/23510

zen cart のその他の脆弱性

• CVE-2024-5762高 8.1Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2020-6578中 6.1Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes…
• CVE-2021-3291高 7.2Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and …
• CVE-2015-8352緊急 9.8Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) …
• CVE-2017-11675高 8.8The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which …