CVE-2004-2025

Zen Cart 1.1.3 is affected by a SQL injection in application_top.php (before patch 2) that can be exploited via the products_id parameter to execute arbitrary SQL on the backend. The vulnerability is remote, with impact on confidentiality/integrity/availability as stated, allowing attackers to ru...

CVE-2004-2025

SQL injection vulnerability in applicationtop.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the productsid parameter...