CVE:CVE-2009-4321
CNNVD:CNNVD-200912-193
Zen Cart中的extras/curltest.php,使远程攻击者可以借助一个file:// URI读取任意文件。
solution:Upgrade zen-cart zen_cart to a higher version than 1.3.8,1.3.8a,and avoid the version 1.3.8,1.3.8a