Description
Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.
References
- ADV-2006-3283 vdb-entry
- zencart-typefilter-file-include(28395) vdb-entry
- 19543 vdb-entry
- http://www.gulftech.org/?node=research&article_id=00109-08152006
- 21484 third-party-advisory