SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the…CVE-2009-2254Zen-Cart · 11% likely

   CWE-89

2. SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, all…CVE-2008-6986Zen-Cart · 2.8% likely

   CWE-89

3. Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC data to the ipn_get_stored_session func…CVE-2006-4214Zen Cart · 2.7% likely

   CWE-89

4. SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.CVE-2005-3996Zen-Cart · 1.9% likely

   CWE-89

5. Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute…CVE-2008-6985Zen-Cart · 1.6% likely

   CWE-89

6. SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advanced_search_r…CVE-2008-6615Zen-Cart · 1.0% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.