Zen Cart version 1.3.9h suffers from local file inclusion and traversal vulnerabilities.
be52ee507546e6b2839c235d737a92c82421e00a0a3bcfcc0e109b12df942b9e
Zen Cart version 1.3.8 suffers from multiple local file inclusion vulnerabilities.
5bbf90470be0dda95174059b1a4dcdac8a49fca9d335fccdb8bed22fb230045d