CVE-2008-6615: SQL Injection

Published Apr 6, 2009

Updated

SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advancedsearchresult page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Zen-cart Zen Cart=2008

Event History

Apr 6, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-6615?

CVE-2008-6615 is classified as a high-severity SQL injection vulnerability.

How do I fix CVE-2008-6615?

To fix CVE-2008-6615, update Zen Cart to the latest version or apply available patches that close the SQL injection vulnerability.

What software is affected by CVE-2008-6615?

CVE-2008-6615 specifically affects Zen Cart version 2008.

What type of vulnerability is CVE-2008-6615?

CVE-2008-6615 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.

Can I exploit CVE-2008-6615 remotely?

Yes, CVE-2008-6615 can be exploited remotely by attackers through the advanced search results page.