CVE-2012-5808 in Zen Cartinfo

Summary

The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/04/2012

Disclosure

11/04/2012

Entries

1: VDB-62855

CPE

ready

CVSS

6.5

EPSS

0.00134

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!