CVE-2020-6577
CRITICALIT-Recht Kanzlei Plugin for Zen Cart 1.5.6c - SQL Injection via itrk-api.php rechtstext_language Parameter
Title source: llmDescription
The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://herolab.usd.de/security-advisories/
Exploit, Third Party Advisory x_refsource_misc
https://herolab.usd.de/security-advisories/usd-2019-0072/
Scores
CVSS v3
9.8
EPSS
0.0155
EPSS Percentile
72.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
it-recht-kanzlei/it-recht-kanzlei
1.5.6c
Published
Mar 19, 2021
Tracked Since
Feb 18, 2026