CVE-2015-2184

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.40%

Published

Mar 10, 2015

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBZeuscart 4.0 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function.

Weaknesses (CWE)

CWE-200

Affected Products (1)

ajsquare · zeuscartvulnerable

References (16)

http://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.html

Exploit

http://seclists.org/fulldisclosure/2015/Feb/89

Exploit

http://seclists.org/oss-sec/2015/q1/649

Exploit

http://seclists.org/oss-sec/2015/q1/727

Exploit

http://sroesemann.blogspot.de/2015/01/sroeadv-2015-12.html

Exploit

http://www.exploit-db.com/exploits/36159

Exploit

http://www.securityfocus.com/bid/72761

https://github.com/ZeusCart/zeuscart/issues/28

http://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.html

Exploit

http://seclists.org/fulldisclosure/2015/Feb/89

Exploit

http://seclists.org/oss-sec/2015/q1/649

Exploit

http://seclists.org/oss-sec/2015/q1/727

Exploit

http://sroesemann.blogspot.de/2015/01/sroeadv-2015-12.html

Exploit

http://www.exploit-db.com/exploits/36159

Exploit

http://www.securityfocus.com/bid/72761

https://github.com/ZeusCart/zeuscart/issues/28

KEV Catalog EPSS Scores Vendors All CVEs