CVE-2011-4403
Zen Cart 1.3.9h - Cross-Site Request Forgery via Product Management Actions
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4403. PoCs published by DisK0nn3cT.
AI-analyzed exploit summary This is a functional CSRF exploit for Zen Cart 1.3.9h, demonstrating how an attacker can trick an admin into deleting a product via a crafted HTML form. The exploit bypasses the security token check by submitting an arbitrary value.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disable a product via a setflag action to categories.php.
Exploits (1)
This is a functional CSRF exploit for Zen Cart 1.3.9h, demonstrating how an attacker can trick an admin into deleting a product via a crafted HTML form. The exploit bypasses the security token check by submitting an arbitrary value.