Zen Cart “Exploit” Prevention

Posted June 24th, 2009 in Tech Corner. Tags: , .

Zen Cart is a popular e-commerce platform that many of our customers use.

Unfortunately, the current version of Zen Cart has a bug that allows “hackers” to take control of the Zen Cart software, which includes making changes to the Zen Cart database and installing new files. “Exploits” that take advantage of the bug have started circulating widely in the last 24 hours.

We’ve added rules to all our Web servers that block the two forms of attack we’re aware of (the “Zen Cart 1.3.8 Remote Code Execution Exploit” and the “Zen Cart 1.3.8 Remote SQL Execution Exploit”). This should protect our customers in the short term.

However, hackers may find new forms of the attack in the future. Because of that, Zen Cart users should apply the security patch Zen Cart is offering and make sure they’ve followed their security recommendations.

  1. Recent Posts

    1. PHP versions 8.1.30, 8.2.24, and 8.3.12
    2. MariaDB (MySQL) database server update from 10.5 to 10.11 (completed)
    3. Labor Day 2024 holiday hours
    4. PHP versions 8.2.22 and 8.3.10
    5. WordPress 6.6
    6. PHP versions 8.1.29, 8.2.21, and 8.3.9
    7. 4th of July 2024 holiday hours
    8. Memorial Day 2024 holiday hours
    9. PHP versions 8.2.19 and 8.3.7
    10. PHP versions 8.1.28, 8.2.18, and 8.3.6

  2. Categories

  3. Tags

    all servers email holiday hours linux mailman maintenance mod_security mysql network php phpmyadmin security server updates spam ssl status updates webmail wordpress zapp

  4. Feeds