CVE-2009-2254

2009-06-3010:30:00

CWE-89

[email protected]

web.nvd.nist.gov

zen cart

sql execution

cve-2009-2254

security vulnerability

admin authentication

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.098 Low

EPSS

Percentile

94.8%

JSON

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a “SQL Execution” issue.

CPENameOperatorVersion
zen-cart:zen_cartzen-cart zen carteq1.2.1d
zen-cart:zen_cartzen-cart zen carteq1.3.6
zen-cart:zen_cartzen-cart zen cartle1.3.8a
zen-cart:zen_cartzen-cart zen carteq1.1.3
zen-cart:zen_cartzen-cart zen carteq1.1.0
zen-cart:zen_cartzen-cart zen carteq1.3.7
zen-cart:zen_cartzen-cart zen carteq1.3.8
zen-cart:zen_cartzen-cart zen carteq1.2.0d
zen-cart:zen_cartzen-cart zen carteq1.2.4d

CPE	Name	Operator	Version
zen-cart:zen_cart	zen-cart zen cart	eq	1.2.1d
zen-cart:zen_cart	zen-cart zen cart	eq	1.3.6
zen-cart:zen_cart	zen-cart zen cart	le	1.3.8a
zen-cart:zen_cart	zen-cart zen cart	eq	1.1.3
zen-cart:zen_cart	zen-cart zen cart	eq	1.1.0
zen-cart:zen_cart	zen-cart zen cart	eq	1.3.7
zen-cart:zen_cart	zen-cart zen cart	eq	1.3.8
zen-cart:zen_cart	zen-cart zen cart	eq	1.2.0d
zen-cart:zen_cart	zen-cart zen cart	eq	1.2.4d