CIA RESEARCH
Alerts
[CIA-1062-Alert] Zen Cart 1.3.0.2 Multiple Vulnerabilities
Summary:
Vulnerabilities in Zen Cart 1.3.0.2 allow a remote attacker to compromise the security of the application.
Technical Details:
Zen Cart versions 1.3.0.2 and previous versions are affected by multiple vulnerabilities.
- SQL Injection via Cookie Tampering
A remote attacker can inject SQL commands via a specially constructed cookie value, allowing full control of the remote database.
- Remote File Inclusion
It is possible to supply a URL that causes Zen Cart to load and execute arbitrary PHP code. The code will execute with the privileges of the HTTP Process.
- Remote File Access
It is possible to supply a parameter over the URL to view the contents of local system files. The attacker can view any file with the privileges of the HTTP Process.
Additional information on these vulnerabilities is available from the link below:
http://www.gulftech.org/?node=research&article_id=00109-08152006
Solution:
Upgrade to a fixed version of Zencart, available from http://www.zencart.com/
CVE Reference:
CVE-2006-4218
CVE-2006-4215
CVE-2006-4214
SecurityTracker Number(s):
1016707
Vendor URL:
About the Cenzic CIA Team:
Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.
About Cenzic:
Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC
|
