CVE-2008-6394

SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter.

Link	Resource
http://secunia.com/advisories/31686	Vendor Advisory
http://www.securityfocus.com/bid/30979
http://www.gulftech.org/?node=research&article_id=00128-09022008
https://exchange.xforce.ibmcloud.com/vulnerabilities/44852
https://www.exploit-db.com/exploits/6352
http://www.securityfocus.com/archive/1/495907/100/0/threaded

Configuration 1

cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.3.3:*:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.2:*:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.1:*:*:*:*:*:*:*

---

Published : 2009-03-04 05:30

Updated : 2018-10-11 08:57

---

NVD link : CVE-2008-6394

Mitre link : CVE-2008-6394

No products.

CWE-89