Unscored CVE-2009-4322 EUVD-2009-4290GHSA-cqqq-7g6v-3j3x

extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the inst…

Published Dec 14, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

References

http://www.acunetix.com/blog/websecuritynews/acusensor-curl-and-zen-cart/
http://www.zen-cart.com/forum/showthread.php?t=142784
20091209 Zen Cart local file disclosure vulnerability mailing-list