Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including (1) graphs/banner_daily.php, (2) graphs/banner_infobox.php, (3) graphs/banner_yearly.php, (4) graphs/banner_monthly.php, (5) application_bottom.php, (6) attributes_preview.php, (7) modules/category_product_listing.php, (8) modules/copy_to_confirm.php, (9) modules/delete_product_confirm.php, and (10) modules/move_product_confirm.php, which leaks the web server path in the resulting error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zen Cart PHP远程攻击漏洞
Vulnerability Description
Zen Cart 1.2.6d及之前版本在特定的PHP配置下，远程攻击者可以通过 admin/includes目录内文件的直接请求获取敏感信息，包括(1) graphs/banner_daily.php， (2) graphs/banner_infobox.php， (3) graphs/banner_yearly.php， (4) graphs/banner_monthly.php， (5) application_bottom.php， (6) attributes_preview.php， (7)
CVSS Information
N/A
Vulnerability Type
N/A