Zen Cart 'admin/sqlpatch.php' SQL Injection Vulnerability

Bugtraq ID:	35468
Class:	Input Validation Error
CVE:	CVE-2009-2254
Remote:	Yes
Local:	No
Published:	Jun 23 2009 12:00AM
Updated:	Apr 13 2015 09:09PM
Credit:	BlackH
Vulnerable:	Zen Ventures Zen Cart 1.3.8
Not Vulnerable:

Zen Cart 'admin/sqlpatch.php' SQL Injection Vulnerability

Zen Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Note that the issue occurs only when the 'admin' directory wasn't properly renamed during the installation process.

Zen Cart 'admin/sqlpatch.php' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following exploit code is available:

• /data/vulnerabilities/exploits/35468.py

Zen Cart 'admin/sqlpatch.php' SQL Injection Vulnerability

Solution:
The vendor has released a patch. Please see the references for details.

Zen Cart 'admin/sqlpatch.php' SQL Injection Vulnerability

References:

• Security Announcement (Zen Cart)
  
• Zen Cart Homepage (Zen Cart)