CVE-2017-10667

In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.

• CWE-79

• https://github.com/zencart/zencart/issues/1443Issue Tracking, Third Party Advisory
• https://github.com/zhonghaozhao/zencart/issues/1Third Party Advisory
• https://github.com/zencart/zencart/issues/1443Issue Tracking, Third Party Advisory
• https://github.com/zhonghaozhao/zencart/issues/1Third Party Advisory

Published

Jun 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10660Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10661Race condition in fs/timerfd.c in the Linux kernel before 4.…7
• CVE-2017-10662The sanity_check_raw_super function in fs/f2fs/super.c in th…7.8
• CVE-2017-10663The sanity_check_ckpt function in fs/f2fs/super.c in the Lin…7.8
• CVE-2017-10664qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIP…7.5
• CVE-2017-10665Directory traversal vulnerability in ajaxfileupload.php in K…
• CVE-2017-10668A Padding Oracle exists in OSCI-Transport 1.2 as used in OSC…
• CVE-2017-10669Signature Wrapping exists in OSCI-Transport 1.2 as used in O…
• CVE-2017-1067Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10670An XML External Entity (XXE) issue exists in OSCI-Transport …
• CVE-2017-10671Heap-based Buffer Overflow in the de_dotdot function in libh…7.8
• CVE-2017-10672Use-after-free in the XML-LibXML module through 2.0129 for P…9.8