VULNERABILITY INTELLIGENCE

CVE-2009-4321

CVSS score5 NONE
EPSS probability2.49%
CISA KEVNot currently listed
Published2009-12-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references