NetSight
IP …
high7.5Public exploit code

CVE-2009-2254

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary S…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a "SQL Execution" issue.

Affected products

VendorProductAffected versions
Zen-CartZen Cart
through 1.3.8a
Versions 1.1.0, 1.1.3, 1.2.0d, 1.2.1d, 1.2.4d

Weakness classification

CWE-89

References