CVE-2006-4214

Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC data to the ipn_get_stored_session function in ipn_main_handler.php, which can be leveraged to modify elements of $_SESSION; and allow remote authenticated users to execute arbitrary SQL commands via (2) a session id within a cookie to whos_online_session_recreate, (3) the quantity field to the add_cart function, (4) an id[] parameter when adding an item to a shopping cart, or (5) a redemption code when checking out (dc_redeem_code parameter to includes/modules/order_total/ot_coupon.php).
Configurations

Configuration 1 (hide)

cpe:2.3:a:zen_cart:zen_cart:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-08-17 21:04

Updated : 2017-07-20 01:32


NVD link : CVE-2006-4214

Mitre link : CVE-2006-4214


JSON object : View

Products Affected

zen_cart

  • zen_cart
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')