Zen Cart admin/sqlpatch.php模块SQL注入漏洞

BugCVE: CVE-2009-2254 BUGTRAQ: 35468 Zen Cart没有对admin/sqlpatch.php模块强制管理认证，这允许远程攻击者在请求中通过querystring和PATHINFO参数执行SQL注入攻击。 Zen Cart 1.3.8 厂商补丁： Zen Ventures ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.zen-cart.com/forum/showthread.php?t=130161 !/usr/bin/python ------- Zen Cart 1.3.8...

CVE-2008-6986

SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shoppingcart.php in Zen Cart 1.3.0 through 1.3.8a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the productsid array parameter in a multipleproductsaddproduct...

CVE-2008-6985

Multiple SQL injection vulnerabilities in includes/classes/shoppingcart.php in Zen Cart 1.2.0 through 1.3.8a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when 1 adding or 2 updating the shopping cart...

Sql injection

Multiple SQL injection vulnerabilities in includes/classes/shoppingcart.php in Zen Cart 1.2.0 through 1.3.8a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when 1 adding or 2 updating the shopping cart...

Sql injection

SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shoppingcart.php in Zen Cart 1.3.0 through 1.3.8a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the productsid array parameter in a multipleproductsaddproduct...

CVE-2008-6985

Multiple SQL injection vulnerabilities in includes/classes/shoppingcart.php in Zen Cart 1.2.0 through 1.3.8a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when 1 adding or 2 updating the shopping cart...

CVE-2008-6985

Zen Cart vulnerability CVE-2008-6985 affects the shopping_cart.php component (includes/classes/shopping_cart.php) in versions 1.2.0 through 1.3.8a, where SQL injection is possible via the id parameter during add or update cart operations when magic_quotes_gpc is disabled. The connected NVD entry ...

CVE-2008-6986

SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shoppingcart.php in Zen Cart 1.3.0 through 1.3.8a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the productsid array parameter in a multipleproductsaddproduct...

CVE-2008-6986

Zen Cart 1.3.0–1.3.8a is affected by CVE-2008-6986 due to an SQL injection in actionMultipleAddProduct in includes/classes/shopping_cart.php. When magic_quotes_gpc is disabled, the products_id[] array used by multiple_products_add_product can lead remote attackers to execute arbitrary SQL command...

CVE-2008-6877

Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the loaderfile parameter. NOTE: the vendor disputes this issue, stating "at...

Directory traversal

Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the loaderfile parameter. NOTE: the vendor disputes this issue, stating "at...

CVE-2008-6878

Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the SESSIONlanguage parameter. NOTE: the vendor disputes this...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

Sql injection

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

Directory traversal

Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the SESSIONlanguage parameter. NOTE: the vendor disputes this...

CVE-2008-6878

Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the SESSIONlanguage parameter. NOTE: the vendor disputes this...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2008-6877

Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the loaderfile parameter. NOTE: the vendor disputes this issue, stating "at...

CVE-2008-6878

CVE-2008-6878 is a directory traversal vulnerability in Zen Cart where remote attackers can cause arbitrary local file inclusion via a crafted _SESSION[language] value in admin/includes/languages/english.php on Zen Cart 1.3.8a, 1.3.8 and earlier when .htaccess is not supported. The issue affects ...

CVE-2008-6877

Summary: CVE-2008-6877 affects Zen Cart 1.3.8 and 1.3.8a. A directory traversal flaw exists in admin/includes/initsystem.php when .htaccess is not supported, allowing remote attackers to include and execute arbitrary local files via a ".." in the loader_file parameter. The vendor disputes the sev...