Test ID:	1.3.6.1.4.1.25623.1.0.100840
Category:	Web application abuses
Title:	Zen Cart <= 1.3.9f Multiple Vulnerabilities
Summary:	Zen Cart is prone to multiple input validation vulnerabilities; because it fails to adequately sanitize user-supplied input. These vulnerabilities include local; file include, SQL injection, and HTML injection issues.
Description:	Summary: Zen Cart is prone to multiple input validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file include, SQL injection, and HTML injection issues. Vulnerability Impact: Exploiting these issues can allow attacker-supplied HTML and script code to run in the context of the affected browser, allowing attackers to steal cookie-based authentication credentials, view local files within the context of the webserver, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible. Affected Software/OS: Zen Cart v1.3.9f is vulnerable, other versions may also be affected. Solution: Updates are available. Please see the reference for more details. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.