high7.5
CVE-2004-2025
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the produ…
Impact
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zen Cart | Zen Cart | Version 1.1.3 |