CVE-2015-0882

Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.

• CWE-79

• http://jvn.jp/en/jp/JVN44544694/281242/index.htmlThird Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN44544694/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000027Third Party Advisory, VDB Entry
• https://github.com/zencart-ja/zc-v1-series/commit/022949bd09444d7e58703cc537dbbd5744c381b8Third Party Advisory
• http://jvn.jp/en/jp/JVN44544694/281242/index.htmlThird Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN44544694/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000027Third Party Advisory, VDB Entry
• https://github.com/zencart-ja/zc-v1-series/commit/022949bd09444d7e58703cc537dbbd5744c381b8Third Party Advisory

Published

Feb 27, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0876Multiple cross-site scripting (XSS) vulnerabilities in the p…
• CVE-2015-0877Unrestricted file upload vulnerability in app/lib/mlf.pl in …
• CVE-2015-0878Directory traversal vulnerability in CREAR AL-Mail32 before …
• CVE-2015-0879CREAR AL-Mail32 before 1.13d allows remote attackers to caus…
• CVE-2015-0880Buffer overflow in CREAR AL-Mail32 before 1.13d allows remot…
• CVE-2015-0881CRLF injection vulnerability in Squid before 3.1.1 allows re…
• CVE-2015-0883SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the ma…
• CVE-2015-0884Unquoted Windows search path vulnerability in Toshiba Blueto…
• CVE-2015-0885checkpw 1.02 and earlier allows remote attackers to cause a …
• CVE-2015-0886Integer overflow in the crypt_raw method in the key-stretchi…
• CVE-2015-0887npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x8…
• CVE-2015-0888KENT-WEB Clip Board before 4.1 allows remote attackers to de…