CVE-2015-8352

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to ajax.php.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/537129/100/0/threadedExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/39017/Exploit, Third Party Advisory, VDB Entry
https://www.htbridge.com/advisory/HTB23282Exploit, Patch, Technical Description, Third Party Advisory
https://www.zen-cart.com/showthread.php?218914-Security-Patches-for-v1-5-4-November-2015Patch, Release Notes, Vendor Advisory
http://www.securityfocus.com/archive/1/537129/100/0/threadedExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/39017/Exploit, Third Party Advisory, VDB Entry
https://www.htbridge.com/advisory/HTB23282Exploit, Patch, Technical Description, Third Party Advisory
https://www.zen-cart.com/showthread.php?218914-Security-Patches-for-v1-5-4-November-2015Patch, Release Notes, Vendor Advisory

Timeline

Published: Aug 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-83536.1Cross-site scripting (XSS) vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers to inject arbitrary w CVE-2015-83546.1Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inje CVE-2015-83558.8Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execu CVE-2015-83568.0Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated users to execute arbi CVE-2015-83576.5Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary f CVE-2015-83589.0Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execut CVE-2015-83609.8An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via CVE-2015-83619.1Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote a CVE-2015-83629.8The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, CVE-2015-83636.8The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does CVE-2015-83646.8Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 CVE-2015-83656.8The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify t