CVE-2009-4322: Zen-Cart Zen Cart

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

Affected products

Published 2009-12-14. Last modified 2026-06-16.