Description
The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322.
Remediation
References
Related Vulnerabilities
WordPress Plugin Google Doc Embedder Multiple Vulnerabilities (2.6.1)
WordPress Plugin Seo Spy Arbitrary File Upload (2.6)
MySQL CVE-2012-0116 Vulnerability (CVE-2012-0116)
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.14)
WordPress Plugin PayGreen-Ancienne version Cross-Site Request Forgery (4.10.2)