CVE-2008-6985
Zen Cart 1.2.0-1.3.8a - SQL Injection via Shopping Cart ID Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6985. PoCs published by GulfTech Security.
AI-analyzed exploit summary The writeup describes a SQL injection vulnerability in Zen Cart versions <= 1.3.8a, specifically in the `actionMultipleAddProduct` function where the `products_id` parameter is not properly sanitized. The exploit allows arbitrary SQL queries, potentially leading to information disclosure or remote code execution via `SELECT INTO OUTFILE`.
Description
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart.
Exploits (1)
The writeup describes a SQL injection vulnerability in Zen Cart versions <= 1.3.8a, specifically in the `actionMultipleAddProduct` function where the `products_id` parameter is not properly sanitized. The exploit allows arbitrary SQL queries, potentially leading to information disclosure or remote code execution via `SELECT INTO OUTFILE`.