SQL Injection Vulnerability in Zen Cart by Zen Cart Technologies
CVE-2005-3996

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
5 December 2005

What is CVE-2005-3996?

A SQL injection vulnerability exists in the admin/password_forgotten.php file of Zen Cart, specifically affecting versions 1.2.6d and earlier. This flaw enables remote attackers to execute arbitrary SQL commands by manipulating the admin_email parameter. Successful exploitation of this vulnerability could lead to unauthorized access or manipulation of the database, posing significant risks to the security of affected installations.

References

http://www.vupen.com/english/advisories/2005/2728
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/17869
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/418995/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.