SQL Injection Vulnerability in Zeus Cart by Zeus Technology
CVE-2009-4940
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2009-4940?
An SQL injection vulnerability exists in the index.php file of Zeus Cart 2.3 and prior versions. Attackers can exploit this weakness by manipulating the maincatid parameter in a showmaincatlanding action, which may lead to unauthorized execution of SQL commands. This exposes the application to potential data breaches and loss of data integrity, highlighting the need for robust input validation and security measures.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.