Total vulnerabilities in the database
extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.
| Software | From | Fixed in |
|---|---|---|
| zen-cart / zen_cart | 1.3.8a | 1.3.8a.x |
| zen-cart / zen_cart | 1.3.8 | 1.3.8.x |