Description

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.

Remediation

References

CVE-2006-0697

Related Vulnerabilities

MySQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-5026)

WordPress Plugin WP Frontend Profile Security Bypass (1.2.1)

WordPress Plugin Custom Login Page Customizer-LoginPress Unspecified Vulnerability (1.1.15)

PHP Improper Input Validation Vulnerability (CVE-2011-1470)

WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Cross-Site Scripting (1.8.14)

Severity

Critical

Classification

CVE-2006-0697 CWE-264

Tags

Missing Update Known Vulnerabilities