Vulnerabilities

TI-2018-15660 CVE-2018-25435 · GHSA-q7hr-57fw-68mm

ZeusCart 4.0 Deactivate Customer Accounts CSRF

HIGH 70

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00156 Published 2026-06-01 No fix listed CWE-352

TI-2014-03144 CVE-2014-3868 · GHSA-8x9f-wrrg-fpxv

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

MEDIUM 43

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02461 Published 2020-01-31 No fix listed CWE-89

TI-2015-01947 CVE-2015-2183 · GHSA-73fc-22xj-hx85

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow…

LOW 39

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a (1) disporders detail or (2) subadminmgt edit act…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03424 Published 2015-03-10 No fix listed CWE-89

TI-2009-04696 CVE-2009-4940 · GHSA-5j5p-26xm-6h27

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote…

LOW 35

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00923 Published 2010-07-22 No fix listed CWE-89

Vulnerabilities

Filters

ZeusCart 4.0 Deactivate Customer Accounts CSRF

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow…

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote…