Show filters
42 Total Results
Displaying 41-42 of 42
Sort by:
Attacker Value
Unknown

CVE-2004-2025

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter.
0
Attacker Value
Unknown

CVE-2004-2023

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.
0