vendor:
CKGold Shopping Cart
by:
Cr@zy_King
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: CKGold Shopping Cart
Affected Version From: 2.5
Affected Version To: 2.5
Patch Exists: YES
Related CWE: CVE-2008-2490
CPE: a:cartkeeper:ckgold_shopping_cart:2.5
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2008
CKGold Shopping Cart 2.5 (category_id) SQL Injection Vulnerability
CKGold Shopping Cart 2.5 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to manipulate SQL queries by injecting arbitrary SQL code. This may allow the attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
Mitigation:
Upgrade to version 2.5.1 or later.
