EDB-43436

PoC

Zen Cart < 1.3.8a - SQL Injection

view exploit source exploit_dbtype webappsauthor GulfTech Securitypublished 2008-09-04catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-6985USmedium6.8Exploit
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan