CVE-2009-4323 - CVE House
Back to Database
Status published High CVE-2009-4323

The installation for Zen Cart stores sensitive information and insecure...

Vulnerability Description

The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4323

Credits & Attribution

No credits recorded in the NVD database.

References

More from zen-cart

View All →
CVE-2021-3291
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands...
High 7.2
CVE-2020-6578
Zen Cart 1.5.6d allows reflected XSS via the main_page parameter...
Medium 6.1
CVE-2017-8833
Zen Cart 1.6.0 has XSS in the main_page parameter to...
Medium 6.1
CVE-2017-11675
The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key...
High 8.8
CVE-2017-10667
In index.php in Zen Cart 1.6.0, the products_id parameter can...
Medium 6.1

Affected Vendor

Affected Software

zen cart
Vulnerable Versions:
Unknown

Timeline

Official Publish: December 14th, 2009
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.