CVE-2009-2254

Опубликовано: 30 июн. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a "SQL Execution" issue.

Ссылки

http://secunia.com/advisories/35550
Vendor Advisory
http://www.exploit-db.com/exploits/9005
http://www.osvdb.org/55343
http://www.securityfocus.com/bid/35468
Exploit
Patch
http://www.zen-cart.com/forum/attachment.php?attachmentid=5965
Patch
Vendor Advisory
http://www.zen-cart.com/forum/showthread.php?t=130161
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/51317
http://secunia.com/advisories/35550
Vendor Advisory
http://www.exploit-db.com/exploits/9005
http://www.osvdb.org/55343
http://www.securityfocus.com/bid/35468
Exploit
Patch
http://www.zen-cart.com/forum/attachment.php?attachmentid=5965
Patch
Vendor Advisory
http://www.zen-cart.com/forum/showthread.php?t=130161
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/51317

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*

Версия до 1.3.8a (включая)

cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*

cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09565

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-6fhm-xqc2-c7hc

github

почти 4 года назад