ZeusCart - prodid SQL Injection

2014-06-24T00:00:00
ID EXPLOITPACK:7A205F349B381DEE92C616A469A83FA0
Type exploitpack
Reporter Kenny Mathis
Modified 2014-06-24T00:00:00

Description

ZeusCart - prodid SQL Injection

                                        
                                            source: https://www.securityfocus.com/bid/68182/info

ZeusCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ZeusCart 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?do=addtocart&prodid=${PROD_ID} and sleep(1)