####################################################################
Zen-cart Database Backup Disclosure Vulnerability
####################################################################
/+/ Exploit title : Zen-cart Database Backup Disclosure Vulnerability
/+/ Script : Zen-cart
/+/ Version : 1.5.1
/+/ Author : JoKeR_StEx
/+/ Date : 22/07/2013
/+/ Category : Webapps
/+/ Google Dork : inurl:"/zc_install/sql/"
####################################################################
First You can Donwload Database :)

#Exemple :

http://traget/zc_install/sql/mysql_zencart.sql

#Demo :

http://asishop.50webs.com/zc_install/sql/mysql_zencart.sql

and You cAN rEAD the Source C0de Of Database

Example :

http://www.8tiny.com/source/zencart/nav.html?zc_install/sql/

####################################################################

#Exploit By JoKeR_StEx <3 Dz Crazy L33ts <3 The Black Devils

Sec W0rm .. Security .. Penetration Testing

###################################################################

The information described is NOT a vulnerability of Zen Cart itself.

The vulnerability is a result of the end-user taking incorrect actions.

Resolution:
a) always delete the zc_install folder after installation. This is required by the application, and the store admin will not function until you do.
b) don't delete the supplied .htaccess files; and host it on a server which properly respects .htaccess rules, as this will prevent unauthorized access of the .sql installation files.
c) there is no /admin/nav.html file in Zen Cart, so whatever has been altered to create that file and allow it to download other files is the result of some other vulnerability introduced to the server unrelated to Zen Cart.

Gaining access to the mysql_zencart.sql file is NOT a security risk. That file is freely available on the internet since the application is open source. There is no disclosure vulnerability with respect to that file. The file is only used for initial installation, and later deleted before using the software.

Thank you so much for your quick reply I found it whilesearching for the Zen cart dB back up plugin and had no idea whether it was athreat or not. So I posted what I had found just to make sure.

So thank youvery much DrByte