CVE-2011-4403: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a deleteproductconfirm action to product.php or (2) disable a product via a setflag action to categories.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4403?
CVE-2011-4403 is rated as a medium severity vulnerability due to its potential for CSRF attacks affecting admin actions in Zen Cart.
How do I fix CVE-2011-4403?
To mitigate CVE-2011-4403, upgrade Zen Cart to a secure version that addresses CSRF vulnerabilities.
What are the consequences of CVE-2011-4403?
Exploiting CVE-2011-4403 may allow attackers to hijack administrator sessions and perform unauthorized actions such as deleting or disabling products.
Which versions of Zen Cart are affected by CVE-2011-4403?
CVE-2011-4403 affects Zen Cart versions 1.3.9h and earlier.
Is CVE-2011-4403 related to CSRF attacks?
Yes, CVE-2011-4403 involves multiple cross-site request forgery vulnerabilities that can exploit admin authentication.