Description
SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin Broken Link Checker PHAR Deserialization (1.11.16)
WordPress Plugin Gmedia Photo Gallery Multiple Cross-Site Scripting Vulnerabilities (1.18.4)
SharePoint Improper Authentication Vulnerability (CVE-2025-49706)
GlassFish CVE-2012-0551 Vulnerability (CVE-2012-0551)
WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)