SynScan
Home
How it works
Pricing
Vulnerability Database
Breach Intelligence
Search Data
Database Index
Contact
Try it now!
CVE-2014-3868
Last update: Apr 13, 2023
Description
Multiple SQL injection vulnerabilities in ZeusCart 4.x.
Affected Software
References
Software
From
Fixed in
zeuscart / zeuscart
4.0
4.0.x
http://packetstormsecurity.com/files/127196/ZeusCart-4.x-Remote-SQL-Injection.html
http://seclists.org/fulldisclosure/2014/Jun/116
http://www.securityfocus.com/bid/68182
https://github.com/ZeusCart/zeuscart/pull/23
Details
Severity:
High
CVE:
CVE-2014-3868
Published:
Jan 31, 2020
Updated:
Apr 13, 2023
Exploit:
CVSS v3
Severity:
High
Score
: 8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2
Severity:
Medium
Score:
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWEs
CWE-89
OWASP TOP 10
A1 - Injection