Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114595. PoCs published by LiquidWorm.
AI-analyzed exploit summary The document describes multiple vulnerabilities in Zen Cart v1.3.9f, including a post-auth SQL injection in 'option_name_manager.php' via the 'option_order_by' parameter and persistent XSS in admin panel fields. It provides technical details, vendor communication timeline, and PoC steps but lacks functional exploit code.
Description
zen cart 1.3.9f - Multiple Vulnerabilities
Exploits (1)
The document describes multiple vulnerabilities in Zen Cart v1.3.9f, including a post-auth SQL injection in 'option_name_manager.php' via the 'option_order_by' parameter and persistent XSS in admin panel fields. It provides technical details, vendor communication timeline, and PoC steps but lacks functional exploit code.