VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 4, 2009· Updated Apr 23, 2026

CVE-2008-6394

CVE-2008-6394

Description

SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter.

Affected products

8
  • Cs Cart/Cs Cart8 versions
    cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*range: <=1.3.5
    • cpe:2.3:a:cs-cart:cs-cart:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.