Description

SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.

Remediation

References

CVE-2005-3996

Related Vulnerabilities

PHP Numeric Errors Vulnerability (CVE-2008-4107)

WordPress Plugin fGallery SQL Injection (2.4.1)

Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-1623)

Dolphin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0873)

Oracle JRE CVE-2019-2973 Vulnerability (CVE-2019-2973)

Severity

Medium

Classification

CVE-2005-3996 CWE-138

Tags

Missing Update Known Vulnerabilities