Description

extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

Remediation

References

CVE-2009-4322

Related Vulnerabilities

WordPress Plugin Easy Testimonial Manager SQL Injection (1.2.0)

WordPress 4.3.x Cross-Site Request Forgery (4.3 - 4.3.18)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)

WordPress Plugin Anti-Malware Security and Brute-Force Firewall Multiple Cross-Site Scripting Vulnerabilities (4.15.17)

MySQL CVE-2022-21637 Vulnerability (CVE-2022-21637)

Severity

Medium

Classification

CVE-2009-4322 CWE-200

Tags

Missing Update Known Vulnerabilities