GCVE - cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*

part: a version: 1.2.5d update: *

Vendor	Zen Cart (`6ee0e2be-fcd7-56ff-b57e-32859e03ced5`)
Product	Zen Cart (`713db896-0e5e-51d2-93a1-3996c8b4b803`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:composer/zencart/zencart`	purl2cpe	2026-06-01 10:17:43.157276
`pkg:github/zencart/zencart`	purl2cpe	2026-06-01 10:17:43.157278

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4218`	vulnerable	2026-06-08 04:49:11.241099	Details available Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter. Published: 2006-08-17T23:00:00.000Z Updated: 2024-08-07T18:57:46.578Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/3283 https://exchange.xforce.ibmcloud.com/vulnerabilities/28395 http://www.securityfocus.com/bid/19543 http://www.gulftech.org/?node=research&article_id=00109-08152006 http://secunia.com/advisories/21484	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0698`	vulnerable	2026-06-08 04:48:54.973708	Details available Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:41:29.232Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0546 http://secunia.com/advisories/18801 https://exchange.xforce.ibmcloud.com/vulnerabilities/24701 http://sourceforge.net/project/shownotes.php?release_id=392886	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0696`	vulnerable	2026-06-08 04:48:54.964688	Details available SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:41:29.199Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0546 http://www.osvdb.org/23110 http://secunia.com/advisories/18801 https://exchange.xforce.ibmcloud.com/vulnerabilities/24701 http://sourceforge.net/project/shownotes.php?release_id=392886	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Zen Cart

Notes

PURL mappings

Vulnerability references

Contribute