Description

extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2009-4321

Related Vulnerabilities

MySQL CVE-2016-8283 Vulnerability (CVE-2016-8283)

Mailman Other Vulnerability (CVE-2002-0855)

WordPress Plugin Stripe Payment for WooCommerce Security Bypass (3.7.9)

WordPress Plugin DOP Slider Arbitrary File Upload (1.0)

WordPress Plugin RSVPMaker SQL Injection (5.6.3)

Severity

Medium

Classification

CVE-2009-4321 CWE-20

Tags

Missing Update Known Vulnerabilities