Description

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a "SQL Execution" issue.

Remediation

References

CVE-2009-2254

Related Vulnerabilities

WordPress Plugin wpcu3er 'ajaxReq.php' Arbitrary File Upload (0.55)

WordPress Plugin Abandoned Cart Recovery for WooCommerce Cross-Site Request Forgery (1.0.4)

Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3483)

WordPress Plugin Author Periodic Report Cross-Site Scripting (1.0)

Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840)

Severity

High

Classification

CVE-2009-2254 CWE-138

Tags

Missing Update Known Vulnerabilities