CVE-2017-10667

Vulnerability

The index.php script in Zen Cart 1.6.0 fails to sanitize the products_id parameter, allowing reflected cross-site scripting (XSS). An attacker can inject arbitrary HTML or JavaScript through this parameter without requiring authentication or special configuration [1][2].

Exploitation

An attacker crafts a malicious URL containing JavaScript code in the products_id parameter and convinces a victim to click it (e.g., via phishing or social engineering). No prior authentication or privileges are needed [1][2].

Impact

Successful exploitation allows the attacker to execute arbitrary script in the victim's browser, potentially leading to session hijacking, defacement, or redirection to malicious sites [1][2].

Mitigation

Zen Cart released a fix in a subsequent version (e.g., 1.6.1). Users should upgrade to the latest stable release to mitigate this vulnerability [2].