Zen Cart@1.3.8a Security Vulnerabilities and Issues — Zen Cart@1.3.8a CVE List

Lucene search

Zen-cartZen Cart1.3.8a

3 matches found

CVE•added 2009/08/19 5:24 a.m.•60 views

CVE-2008-6985

Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart.

6.8CVSS8.6AI score0.02331EPSS

CVE•added 2009/12/14 11:30 p.m.•58 views

CVE-2009-4321

extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information.

5CVSS6.6AI score0.00819EPSS

CVE•added 2009/08/19 5:24 a.m.•38 views

CVE-2008-6986

SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products_id array parameter in a multiple_products_add_pr...

6.8CVSS8.5AI score0.02331EPSS