SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote malicious users to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
zen cart zen cart 1.1.2d |
||
zen cart zen cart 1.1.4 |