jetlib.sec » Full Disclosure » Zen-Cart Admin CSRF/XSRF - Delete / Disable Products | UPS-2011-0018 | CVE-2011-4403

Feeds

133098 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 10, 2012
• 

  Zen-Cart Admin CSRF/XSRF - Delete / Disable Products | UPS-2011-0018 | CVE-2011-4403

  Posted: February 10th, 2012, 8:39am PST

  Tags:   

  Posted by upsploit advisories on Feb 10

  *Advisory Information*
  
  Title: Zen-Cart Admin CSRF/XSRF - Delete / Disable Products
  Date published: 2012-02-10 01:59:45 AM
  upSploit Ref: UPS-2011-0018
  
  CVE REF: CVE-2011-4403
  
  *Advisory Summary*
  
  An attacker can force an administrator to delete or disable products from
  within his store.
  
  *Vendor*
  
  Zen-Cart
  
  *Affected Software*
  
  Zen-Cart v1.3.9h
  
  Zen Cart™ truly is the art of e-commerce; free, user-friendly, open source
  shopping cart software....