Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

E-Commerce

ZenCart

Zen Cart truly is the art of e-commerce free user-friendly open source shopping cart software. The ecommerce web site design program is being developed by group of like-minded shop owners programmers designers and consultants that think ecommerce web design could be and should be done differently.

Official Site:

https://www.zen-cart.com

Severity Summary:

Critical: 2 High: 5 Medium: 11 Low: 1
Reference
Title
Severity
CVE-2006-0697
ZenCart Permissions Privileges and Access Controls Vulnerability
Critical
CVE-2015-8352
ZenCart Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2017-11675
ZenCart Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2021-3291
ZenCart Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
High
CVE-2009-2254
ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2009-4323
ZenCart Other Vulnerability
High
CVE-2024-5762
ZenCart Inclusion of Functionality from Untrusted Control Sphere Vulnerability
High
CVE-2011-4567
ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-4547
ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-0882
ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2009-4322
ZenCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2009-4321
ZenCart Improper Input Validation Vulnerability
Medium
CVE-2008-6986
ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2008-6985
ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2009-2255
ZenCart Improper Authentication Vulnerability
Medium
CVE-2011-4403
ZenCart Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2020-6578
ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2005-3996
ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2012-1413
ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low