CVE-2006-0697: Zen-Cart Zen Cart

High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.

Affected products

• Zen-Cart Zen Cart: up to and including 1.2.6d; version 1.1.0 only; version 1.1.3 only; version 1.2.0d only; version 1.2.1 only; version 1.2.1d only; …

Published 2006-02-15. Last modified 2026-06-16.