Vulnerability Details CVE-2006-4218
Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/21484
- http://www.gulftech.org/?node=research&article_id=00109-08152006
- http://www.securityfocus.com/bid/19543
- http://www.vupen.com/english/advisories/2006/3283
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28395
- http://secunia.com/advisories/21484
- http://www.gulftech.org/?node=research&article_id=00109-08152006
- http://www.securityfocus.com/bid/19543
- http://www.vupen.com/english/advisories/2006/3283
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28395
Products affected by CVE-2006-4218
-
cpe:2.3:a:zen_cart:zen_cart:1.2.0d
-
cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1
-
cpe:2.3:a:zen_cart:zen_cart:1.2.1d
-
cpe:2.3:a:zen_cart:zen_cart:1.2.2d
-
cpe:2.3:a:zen_cart:zen_cart:1.2.3d
-
cpe:2.3:a:zen_cart:zen_cart:1.2.4.1
-
cpe:2.3:a:zen_cart:zen_cart:1.2.4d
-
cpe:2.3:a:zen_cart:zen_cart:1.2.5d
-
cpe:2.3:a:zen_cart:zen_cart:1.2.6d
-
cpe:2.3:a:zen_cart:zen_cart:1.3.0.2