« Volver al listado

CVE-2008-6985

Estado: ModificadaMedia (6.8)—

Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zen-cart — ZEN Cart

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-6985",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-08-19T05:24:52.453",
  "references": [
    {
      "url": "http://secunia.com/advisories/31758",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gulftech.org/?node=research&article_id=00129-09042008",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/48346",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/496002/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/496032/100/100/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/31023",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zen-cart.com/forum/showthread.php?p=604473",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44917",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31758",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gulftech.org/?node=research&article_id=00129-09042008",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/48346",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/496002/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/496032/100/100/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/31023",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zen-cart.com/forum/showthread.php?p=604473",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44917",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de inyección SQL en includes/classes/shopping_cart.php en Zen Cart v1.2.0 a v1.3.8a, cuando magic_quotes_gpc está desactivado, permiten a atacantes remotos ejecutar comandos SQL a través del parámetro ID cuando (1) se añade algo o (2) se actualiza el carrito de la compra."
    }
  ],
  "lastModified": "2026-06-16T23:03:22.070",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C27DEB51-7745-4B5A-9E23-5491526E857E"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B6F7573-2BED-4035-88A3-88D4EDE39CA1"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.2d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62FF3EA3-FF9F-4E21-B485-C570DB62E0F0"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.3d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "271B7AA0-13C1-409A-A6CA-9532757B864B"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FD3CD1F-4BE7-436B-A0BE-2F96162AD76B"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82CED1DF-15F5-47A2-9C70-F276B466167E"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.5d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A866A952-5EE5-4B11-826E-123B19A98D9D"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.2.6d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE17BAE0-11F8-4BCB-AE63-9482F17083A8"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB406101-000B-4787-9EA8-3FF35CFFE23A"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4616B2FA-266F-4D69-A04A-657EF731B0D1"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A6A2F06-753F-41A6-84E5-7F1AE340265E"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDB743EA-A17B-406C-81CE-64A52FBB5966"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BE00024-0295-43BE-8123-56526197B58E"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE050A6F-DF2A-47E8-8188-59BC00C11E70"
            },
            {
              "criteria": "cpe:2.3:a:zen-cart:zen_cart:1.3.8a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B91E4C9-31A7-4CA6-8641-F0D4AEA543BE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}