Zen Cart : Security Vulnerabilities, CVEs, Published In 2004
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter.
Max CVSS
7.5
EPSS Score
0.16%
Published
2004-12-31
Updated
2008-09-05
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.
Max CVSS
7.5
EPSS Score
0.21%
Published
2004-12-31
Updated
2008-09-05
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.
Max CVSS
7.5
EPSS Score
0.56%
Published
2004-12-31
Updated
2018-10-19
3 vulnerabilities found