Critical severity9.8NVD Advisory· Published Aug 24, 2017· Updated Jun 17, 2026

CVE-2015-8352

Description

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to ajax.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zen Cart/ZenCartinferred3 versions
=1.5.4+ 2 more
- (no CPE)range: =1.5.4
- cpe:2.3:a:zen-cart:zen_cart:1.5.4:*:*:*:*:*:*:*
- (no CPE)range: 1.5.4

Patches

Vulnerability mechanics

References

www.zen-cart.com/showthread.phpnvdPatchRelease NotesVendor Advisory
www.securityfocus.com/archive/1/537129/100/0/threadednvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/39017/nvdExploitThird Party AdvisoryVDB Entry
www.htbridge.com/advisory/HTB23282nvdExploitPatchTechnical DescriptionThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.013
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000