Lucene search
MitreCVELIST:CVE-2008-6985HistoryAug 18, 2009 - 10:00 a.m.
CVE-2008-6985
2009-08-1810:00:00
mitre
www.cve.org
3
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart.
References
secunia.com/advisories/31758
www.gulftech.org/?node=research&article_id=00129-09042008
www.osvdb.org/48346
www.securityfocus.com/archive/1/496002/100/0/threaded
www.securityfocus.com/archive/1/496032/100/100/threaded
www.securityfocus.com/bid/31023
www.zen-cart.com/forum/showthread.php?p=604473
exchange.xforce.ibmcloud.com/vulnerabilities/44917
Related
nvd
nvd
CVE-2008-6985
2009-08-19 05:24:52
CVE-2008-6986
2009-08-19 05:24:52
exploitpack
exploitpack
Zen Cart 1.3.8a - SQL Injection
2008-09-04 00:00:00
cve
cve
CVE-2008-6985
2009-08-19 05:24:52
CVE-2008-6986
2009-08-19 05:24:52
exploitdb
exploitdb
Zen Cart < 1.3.8a - SQL Injection
2008-09-04 00:00:00
prion
prion
Sql injection
2009-08-19 05:24:00
Sql injection
2009-08-19 05:24:00
cvelist
cvelist
CVE-2008-6986
2009-08-18 10:00:00