CVE-2026-108826

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...

CVE-2026-108826 Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...

CVE-2026-108826

A SQL injection vulnerability exists in Zen Cart up to version 2.2.2 . The flaw is located in the PayPal IPN Handler component, specifically within the zen_db_perform function in the includes/modules/payment/paypaldp.php library. An attacker can initiate this attack remotely by manipulating the t...

CVE-2026-108826 Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...

EUVD-2026-97330

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...

CVE-2026-108826: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zendbperform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txnid results in sql injection. The attack can be initiated remotely. The...

CVE-2005-0898: Undefined Security Weakness

Cross-site scripting XSS vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txnid parameter...