Rezultati pretraživanja za 'Proizvođač: zen-cart'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2011-4403 | 5.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disab | 2015-04-27 14:28:00 | 2015-04-24 14:59:00 |
| CVE-2006-0697 | 10.0 | Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests. | 2013-01-03 05:00:00 | 2006-02-15 11:06:00 |
| CVE-2012-5807 | 5.8 | The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL serve | 2012-11-06 05:00:00 | 2012-11-04 22:55:00 |
| CVE-2012-5806 | 5.8 | The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL server | 2012-11-06 05:00:00 | 2012-11-04 22:55:00 |
| CVE-2012-5805 | 5.8 | The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers | 2012-11-06 05:00:00 | 2012-11-04 22:55:00 |
| CVE-2012-5808 | 5.8 | The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an a | 2012-11-05 18:57:00 | 2012-11-04 22:55:00 |
| CVE-2012-1413 | 2.6 | Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the db | 2012-05-28 04:00:00 | 2012-05-27 19:55:00 |
| CVE-2009-4323 | 7.5 | The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and | 2009-12-15 05:00:00 | 2009-12-14 23:30:00 |
| CVE-2004-2025 | 7.5 | SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter. | 2008-09-05 20:43:00 | 2004-12-31 05:00:00 |
| CVE-2004-2024 | 7.5 | The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php. | 2008-09-05 20:42:00 | 2004-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/4
Zapisa po stranici: