Security Advisory
CVE-2009-4322
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.