CVE-2005-3997: Zen Cart

Low severity, CVSS 2.6. EPSS: 2% chance of exploitation in the next 30 days.

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including (1) graphs/banner_daily.php, (2) graphs/banner_infobox.php, (3) graphs/banner_yearly.php, (4) graphs/banner_monthly.php, (5) application_bottom.php, (6) attributes_preview.php, (7) modules/category_product_listing.php, (8) modules/copy_to_confirm.php, (9) modules/delete_product_confirm.php, and (10) modules/move_product_confirm.php, which leaks the web server path in the resulting error message.

Affected products

• Zen Cart Zen Cart: up to and including 1.2.6d

Published 2005-12-05. Last modified 2026-06-16.