VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 4, 2009· Updated Jun 16, 2026

CVE-2008-6394

CVE-2008-6394

Description

SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Office Ocx/Cs Cart8 versions
    cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*range: <=1.3.5
    • cpe:2.3:a:cs-cart:cs-cart:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:*:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*
    • cpe:2.3:a:cs-cart:cs-cart:1.3.3:*:*:*:*:*:*:*
  • E Cart/E Cartllm-fuzzy
    Range: <=1.3.5

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.