E-Commerce

ZenCart

Zen Cart truly is the art of e-commerce free user-friendly open source shopping cart software. The ecommerce web site design program is being developed by group of like-minded shop owners programmers designers and consultants that think ecommerce web design could be and should be done differently.

Official Site:

https://www.zen-cart.com

Severity Summary:

Critical: 2 High: 5 Medium: 11 Low: 1

Reference

Title

Severity

CVE-2006-0697

ZenCart Permissions Privileges and Access Controls Vulnerability

Critical

CVE-2015-8352

ZenCart Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Critical

CVE-2017-11675

ZenCart Improper Control of Generation of Code (Code Injection) Vulnerability

High

CVE-2021-3291

ZenCart Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability

High

CVE-2009-2254

ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

High

CVE-2009-4323

ZenCart Other Vulnerability

High

CVE-2024-5762

ZenCart Inclusion of Functionality from Untrusted Control Sphere Vulnerability

High

CVE-2011-4567

ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2011-4547

ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2015-0882

ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2009-4322

ZenCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2009-4321

ZenCart Improper Input Validation Vulnerability

Medium

CVE-2008-6986

ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Medium

CVE-2008-6985

ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Medium

CVE-2009-2255

ZenCart Improper Authentication Vulnerability

Medium

CVE-2011-4403

ZenCart Cross-Site Request Forgery (CSRF) Vulnerability

Medium

CVE-2020-6578

ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2005-3996

ZenCart Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Medium

CVE-2012-1413

ZenCart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low