First published: Mon Dec 14 2009(Updated: )
The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Zen Cart |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-4323 is classified as a moderate severity vulnerability due to the risk of sensitive information disclosure and potential for further attacks.
To fix CVE-2009-4323, ensure that the installation and documentation folders are properly secured and inaccessible to unauthorized users.
The potential consequences of CVE-2009-4323 include unauthorized access to sensitive information, database deletion, and exploitation of the installation files.
CVE-2009-4323 affects all versions of Zen Cart that expose the insecure installation and documentation files.
You can mitigate the risks associated with CVE-2009-4323 by removing or securing the docs, extras, zc_install folders, and relevant installation files.