Description
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a "SQL Execution" issue.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2023-22052 Vulnerability (CVE-2023-22052)
WordPress Plugin Media Library Categories Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
WordPress 3.6 Multiple Vulnerabilities (2.0 - 3.6)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5304)