CyberSec.Space Logo
Back to CVE Browser

CVE-2006-0697

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0050%
EPSS Percentile36.09th
PublishedFeb 15, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.

Affected Platforms (CPE)

📦
Zen Cart

Zen Cart

<= 1.2.6d
📦
Zen Cart

Zen Cart

= 1.1.0
📦
Zen Cart

Zen Cart

= 1.1.3
📦
Zen Cart

Zen Cart

= 1.2.0d
📦
Zen Cart

Zen Cart

= 1.2.1
📦
Zen Cart

Zen Cart

= 1.2.1d
📦
Zen Cart

Zen Cart

= 1.2.2d
📦
Zen Cart

Zen Cart

= 1.2.3d
📦
Zen Cart

Zen Cart

= 1.2.4.1
📦
Zen Cart

Zen Cart

= 1.2.4d
📦
Zen Cart

Zen Cart

= 1.2.5d

References & Advisories

🔗 http://secunia.com/advisories/18801
🔗 http://sourceforge.net/project/shownotes.php?release_id=392886
🔗 http://www.vupen.com/english/advisories/2006/0546
🔗 http://secunia.com/advisories/18801
🔗 http://sourceforge.net/project/shownotes.php?release_id=392886
🔗 http://www.vupen.com/english/advisories/2006/0546

Related Vulnerabilities

CVE-2006-069810.0

Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors relate...

CVE-2015-83529.8

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. ...

CVE-2020-65779.8

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection.

CVE-2007-35978.5

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie ...