CVE-2006-4218 - Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter

Back Back to CVE browser

HIGH

Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter

Published Aug 17, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.78%

Description

Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/21484
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.gulftech.org/?node=research&article_id=00109-08152006
x_refsource_MISCExploit
http://www.securityfocus.com/bid/19543
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3283
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4208
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28395
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/21484		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.gulftech.org/?node=research&article_id=00109-08152006		x_refsource_MISCExploit
http://www.securityfocus.com/bid/19543		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3283		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4208		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28395		vdb-entryx_refsource_XF