CVE

Id
37102  
CVE No.
CVE-2008-6985  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403183 37102 CVE-2008-6985 BUGTRAQ:20080904 Re: Zen Cart <= 1.3.8a SQL Injection  View
403184 37102 CVE-2008-6985 URL:http://www.securityfocus.com/archive/1/archive/1/496032/100/100/threaded  View
403185 37102 CVE-2008-6985 BUGTRAQ:20080904 Zen Cart <= 1.3.8a SQL Injection  View
403186 37102 CVE-2008-6985 URL:http://www.securityfocus.com/archive/1/archive/1/496002/100/0/threaded  View
403187 37102 CVE-2008-6985 MISC:http://www.gulftech.org/?node=research&article_id=00129-09042008  View
403188 37102 CVE-2008-6985 CONFIRM:http://www.zen-cart.com/forum/showthread.php?p=604473  View
403189 37102 CVE-2008-6985 BID:31023  View
403190 37102 CVE-2008-6985 URL:http://www.securityfocus.com/bid/31023  View
403191 37102 CVE-2008-6985 OSVDB:48346  View
403192 37102 CVE-2008-6985 URL:http://www.osvdb.org/48346  View
403193 37102 CVE-2008-6985 SECUNIA:31758  View
403194 37102 CVE-2008-6985 URL:http://secunia.com/advisories/31758  View
403195 37102 CVE-2008-6985 XF:zencart-shoppingcart-sql-injection(44917)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42073 JVNDB-2009-003080 Ezphotogallery の gallery.php における SQL インジェクションの脆弱性 Ezphotogallery の gallery.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6989 37102 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003080.html  View