Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disable a product via a setflag action to categories.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zen Cart 跨站请求伪造漏洞
Vulnerability Description
Zen Cart是Zen Cart团队开发的一套开源的购物车系统。该系统主要用于建立网上商店，可支持多种付款方式、多语言选择、网上商城批量更新等。 Zen Cart 1.3.9h版本中存在跨站请求伪造漏洞。远程攻击者可通过对product.php脚本执行delete_product_confirm操作利用该漏洞删除产品；或通过对categories.php脚本执行setflag操作利用该漏洞禁用产品。
CVSS Information
N/A
Vulnerability Type
N/A