← Database

CVE-2009-4321

MEDIUM CVSS: 5.0 Published: 2009-12-14 Modified: 2026-06-16

Description

extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.

Affected Platforms

Zen-Cart Zen Cart

Weakness Type

CWE-20

References