Re: Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:
From: please-use-the-support-forum@xxxxxxxxxxxx
Date: 13 Feb 2006 18:07:20 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

The mentioned vulnerabilities may be remedied by upgrading to v1.2.7:

http://www.zen-cart.com/modules/ipb/index.php?showtopic=41626