CVE-2008-6985

Zen Cart vulnerability CVE-2008-6985 affects the shopping_cart.php component (includes/classes/shopping_cart.php) in versions 1.2.0 through 1.3.8a, where SQL injection is possible via the id parameter during add or update cart operations when magic_quotes_gpc is disabled. The connected NVD entry ...