CVE-2008-6878

Zen Cart 1.3.8a and earlier - Path Traversal via _SESSION[language] Parameter

Title source: llm

Description

Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _SESSION[language] parameter. NOTE: the vendor disputes this issue, stating "at worst, the use of this vulnerability will reveal some local file paths.

References (6)

Core 6

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31039

Exploit mailing-list x_refsource_vim

http://www.attrition.org/pipermail/vim/2008-July/002028.html

Exploit x_refsource_misc

http://www.zen-cart.com/forum/showthread.php?t=102802

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/6038

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30179

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/46913

Scores

EPSS 0.0234

EPSS Percentile 81.6%

Details

CWE

CWE-22

Status published

Products (2)

zen_cart/zen_cart 1.3.8

zen_cart/zen_cart 1.3.8a

Published Jul 27, 2009

Tracked Since Feb 18, 2026