Description

Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common/tpl_header_test_info.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the (1) main_page parameter or (2) PATH_INFO, a different vulnerability than CVE-2011-4567.

Remediation

References

CVE-2011-4547

Related Vulnerabilities

Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51489)

WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7076)

Liferay Portal Observable Discrepancy Vulnerability (CVE-2024-25146)

Oracle HTTP Server CVE-2016-3482 Vulnerability (CVE-2016-3482)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-4547