CVE:CVE-2005-3996
CNNVD:CNNVD-200512-075
Zen Cart 1.2.6d 及之前版本的admin/password_forgotten.php中存在SQL注入漏洞。远程攻击者可以借助admin_email 参数执行任意SQL指令。
solution:Upgrade zen-cart zen_cart to a higher version than 1.2.6d,and avoid the version (,1.2.6d]