Vulnerabilities > CVE-2004-2023 - SQL Injection vulnerability in ZEN Cart ZEN Cart 1.1.2D/1.1.4

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
zen-cart
NVD
Published: 2004-12-31
Updated: 2018-10-19

Summary

SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.

Vulnerable Configurations

Part Description Count
Application
Zen_Cart
2

References