EUVD-2004-2017

Malware in sbrugna...

CVE-2009-5077: Improper Authentication

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...

CVE-2004-2025

Zen Cart 1.1.3 is affected by a SQL injection in application_top.php (before patch 2) that can be exploited via the products_id parameter to execute arbitrary SQL on the backend. The vulnerability is remote, with impact on confidentiality/integrity/availability as stated, allowing attackers to ru...

CVE-2004-2025: Undefined Security Weakness

SQL injection vulnerability in applicationtop.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the productsid parameter...

CVE-2004-2025

SQL injection vulnerability in applicationtop.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the productsid parameter...