CVE-2009-4321: Input Validation
Published Dec 14, 2009
·Updated
extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.
Affected Software
2 affected components
Zen-cart Zen Cart=1.3.8a
Zen-cart Zen Cart=1.3.8
Event History
Dec 14, 2009
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4321?
CVE-2009-4321 is considered a moderate severity vulnerability due to its ability to expose sensitive files.
2
How do I fix CVE-2009-4321?
To fix CVE-2009-4321, it is recommended to upgrade Zen Cart to a version later than 1.3.8a.
3
What systems are affected by CVE-2009-4321?
CVE-2009-4321 affects Zen Cart versions 1.3.8 and 1.3.8a.
4
Can CVE-2009-4321 lead to data breaches?
Yes, CVE-2009-4321 can lead to data breaches as it allows attackers to read arbitrary files on the server.
5
What types of attacks are possible with CVE-2009-4321?
CVE-2009-4321 allows remote attackers to perform file inclusion attacks using file:// URIs.