Vulnerability in Zen-Cart Zen Cart

CVE-2006-0697

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.

EPSS: 0.052 (91.7th percentile) — read the EPSS interpretation.

Affected products

Zen-cart Zen_cart — versions 1.1.0, 1.1.3, 1.2.0d
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch)