PT-2021-12495

Name of the Vulnerable Software and Affected Versions: Zen Cart version 1.5.6c Description: The issue concerns a SQL Injection vulnerability in the IT-Recht Kanzlei plugin. Specifically, the itrk-api.php endpoint is affected, allowing SQL Injection through the rechtstext language parameter...

CVE-2020-6577: Improper Neutralization of Special Elements used in an SQL Command

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...