CVE-2008-6616: zen-cart zen_cart Cross-site Scripting

EPSS trend

Probability

1.44%

Chance of exploitation in the next 30 days

Percentile

73%

Versus all other CVEs

30-day change

0.00 pp

From 1.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (downloads.securityfocus.com)
Maturity: unknown
exploit-databasephpVerified
Zen Cart 2008 - 'index.php?keyword' Cross-Site Scripting
Maturity: poc

References

3 links

exchange.xforce.ibmcloud.com/vulnerabilities/42162VDB EntryX Refsource XF
www.securityfocus.com/bid/29020VDB EntryX Refsource BIDExploit
downloads.securityfocus.com/vulnerabilities/exploits/29020.htmlX Refsource MISCExploit

Related vulnerabilities

CVE-2021-3291zen-cartzen_cart16.78%5y ago26-01-2021 06:47Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.CVE-2015-0882zen-cartzen_cart2.19%11y ago27-02-2015 02:00Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.CVE-2015-8352zen-cartzen_cart15.64%9y ago24-08-2017 21:00Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to ajax.php.CVE-2020-6578zen-cartzen_cart0.84%5y ago19-03-2021 03:29Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.CVE-2005-3996zen-cartzen_cart1.93%20y ago05-12-2005 00:00SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.CVE-2008-6615zen-cartzen_cart0.96%17y ago06-04-2009 18:00SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

All vulnerabilities inzen_cart

CVE-2008-6616: zen-cart zen_cart Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References