Test ID:	1.3.6.1.4.1.25623.1.0.800820
Category:	Web application abuses
Title:	Zen Cart <= 1.3.8a Multiple Vulnerabilities
Summary:	Zen Cart is prone to multiple vulnerabilities.
Description:	Summary: Zen Cart is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2009-2254: Error in admin/sqlpatch.php file due to lack of sanitisation of the input query string passed into the 'query_string' parameter in an execute action in conjunction with a PATH_INFO of password_forgotten.php file. - CVE-2009-2255: Access to admin/record_company.php is not restricted and can be exploited via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images/. Vulnerability Impact: Successful exploitation will let the remote attacker to execute SQL commands or arbitrary code by uploading a .php file, and compromise the application, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: Zen Cart version 1.3.8a and prior. Solution: Apply the security patch from the references. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2254 BugTraq ID: 35468 http://www.securityfocus.com/bid/35468 http://www.exploit-db.com/exploits/9005 http://www.osvdb.org/55343 http://secunia.com/advisories/35550 XForce ISS Database: zencart-sqlpatch-sql-injection(51317) https://exchange.xforce.ibmcloud.com/vulnerabilities/51317 Common Vulnerability Exposure (CVE) ID: CVE-2009-2255 BugTraq ID: 35467 http://www.securityfocus.com/bid/35467 http://www.exploit-db.com/exploits/9004 http://www.osvdb.org/55344 XForce ISS Database: zencart-recordcompany-code-execution(51316) https://exchange.xforce.ibmcloud.com/vulnerabilities/51316
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.