SQL Injection Vulnerability in AJ Square ZeusCart by AJ Square
CVE-2008-5216
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-5216?
The vulnerability in category_list.php of AJ Square's ZeusCart version 2.0 and earlier enables remote attackers to manipulate SQL queries through the cid parameter. This flaw can be exploited to execute arbitrary SQL commands on the database, leading to unauthorized data access and potential data manipulation. It is crucial for users of ZeusCart to apply security updates and implement proper input validation measures to mitigate this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.