Vulnerability in Zen Cart

CVE-2006-4218

Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.

EPSS: 0.018 (75.5th percentile) — read the EPSS interpretation.

Affected products

  • Zen_cart — versions 1.2.0d, 1.2.1_patch1, 1.2.1d
  • N/a — versions n/a

References