Zen Cart : Security Vulnerabilities, CVEs, Published In 2004 (Sql injection) CVSS score >= 5
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter.
Max CVSS
7.5
EPSS Score
0.18%
Published
2004-12-31
Updated
2008-09-05
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.
Max CVSS
7.5
EPSS Score
0.89%
Published
2004-12-31
Updated
2018-10-19
2 vulnerabilities found