SQL Injection Vulnerability in Zen Cart by Zen Software
CVE-2008-6615

Currently unrated

Key Information:

Vendor: Zen-cart
Status: Zen Cart
Vendor: CVE Published:; 6 April 2009

Badges

👾 Exploit Exists

What is CVE-2008-6615?

An SQL injection vulnerability exists in the index.php file of Zen Software's Zen Cart 2008. This flaw allows remote attackers to manipulate SQL queries through the keyword parameter on the advanced_search_result page, potentially enabling them to execute arbitrary SQL commands. Exploitation of this vulnerability could compromise the database, leading to unauthorized access to sensitive information or manipulation of data stored within the application.