Vulnerability Description
Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the db_username parameter to zc_install/index.php.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zen-Cart | Zen Cart | All versions |
Related Weaknesses (CWE)
References
- https://www.trustwave.com/spiderlabs/advisories/TWSL2012-004.txt
- https://www.trustwave.com/spiderlabs/advisories/TWSL2012-004.txt
FAQ
What is CVE-2012-1413?
CVE-2012-1413 is a vulnerability with a CVSS score of 2.6 (LOW). Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers...
How severe is CVE-2012-1413?
CVE-2012-1413 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1413?
Check the references section above for vendor advisories and patch information. Affected products include: Zen-Cart Zen Cart.