[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVR_HElo_cGh3yI3zTbGhkIQL7xXiKdfDSWG6DKWVSpw":3,"g5a-risk:CVE-2008-6986":169},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":63,"references":64,"referencesCount":107,"weaknesses":108,"weaknessesCount":116,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":117,"seoMetadata":118,"configurations":143,"relatedVendorCves":165,"notableEvents":166},"CVE-2008-6986","What is CVE-2008-6986?","SQL injection vulnerability in the actionMultipleAddProduct function in includes\u002Fclasses\u002Fshopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products_id array parameter in a multiple_products_add_product action, a different vulnerability than CVE-2008-6985.","SQL injection vulnerability in the actionMultipleAddProduct function in includes\u002Fclasses\u002Fshopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quote...","2009-08-19T05:24:52.467","2026-06-16T23:03:22.203",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,6.4,false,[],0.02808,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51,54,57,60],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"zen-cart","zen_cart","1.3","cpe:2.3:a:zen-cart:zen_cart:1.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"1.3.0.2","cpe:2.3:a:zen-cart:zen_cart:1.3.0.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"1.3.2","cpe:2.3:a:zen-cart:zen_cart:1.3.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"1.3.5","cpe:2.3:a:zen-cart:zen_cart:1.3.5:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"1.3.6","cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":55,"criteria":56,"vulnerable":4},"1.3.7","cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":58,"criteria":59,"vulnerable":4},"1.3.8","cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":61,"criteria":62,"vulnerable":4},"1.3.8a","cpe:2.3:a:zen-cart:zen_cart:1.3.8a:*:*:*:*:*:*:*",8,[65,70,75,79,83,86,89,93,95,97,99,101,103,105],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F31758","Secunia",[69],"Vendor Advisory",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fwww.gulftech.org\u002F?node=research&article_id=00129-09042008","Gulftech",[74],"Exploit",{"url":76,"source":77,"tags":78},"http:\u002F\u002Fwww.osvdb.org\u002F48347","Osvdb",[],{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F496002\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":84,"source":81,"tags":85},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F496032\u002F100\u002F100\u002Fthreaded",[],{"url":87,"source":81,"tags":88},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F31023",[],{"url":90,"source":91,"tags":92},"http:\u002F\u002Fwww.zen-cart.com\u002Fforum\u002Fshowthread.php?p=604473","Zen-cart",[69],{"url":66,"source":67,"tags":94},[69],{"url":71,"source":72,"tags":96},[74],{"url":76,"source":77,"tags":98},[],{"url":80,"source":81,"tags":100},[],{"url":84,"source":81,"tags":102},[],{"url":87,"source":81,"tags":104},[],{"url":90,"source":91,"tags":106},[69],14,[109],{"id":110,"name":111,"description":112,"extendedDescription":27,"status":113,"abstraction":114,"structure":115},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","Stable","Base","Simple",1,[],{"title":119,"metaDescription":120,"keywords":121,"canonicalUrl":122,"structuredData":123},"What is CVE-2008-6986? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-6986, a medium severity cyber security vulnerability from 2009. SQL injection vulnerability in the actionMultipleAddProduc...","CVE-2008-6986, CVE-2008-6986 vulnerability, CVE-2008-6986 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, zen-cart security, zen_cart vulnerability","\u002Fwhat-is\u002Fcve-2008-6986",{"@context":124,"@type":125,"headline":119,"description":120,"datePublished":10,"dateModified":11,"author":126,"publisher":130,"about":134,"mainEntityOfPage":138,"articleSection":141,"keywords":142},"https:\u002F\u002Fschema.org","TechArticle",{"@type":127,"name":128,"url":129},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":127,"name":128,"url":129,"logo":131},{"@type":132,"url":133},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":135,"name":6,"description":136,"additionalType":137},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":139,"@id":140},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-6986","Cybersecurity","CVE-2008-6986, CVE-2008-6986 vulnerability, CVE-2008-6986 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[144],{"Operator":28,"Negate":28,"Nodes":145},[146],{"Operator":147,"Negate":31,"CPEMatch":148},"OR",[149,151,153,155,157,159,161,163],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":150,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AB406101-000B-4787-9EA8-3FF35CFFE23A",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":152,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"12EF0BC7-0F38-454B-9864-E740E931FF65",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":154,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4616B2FA-266F-4D69-A04A-657EF731B0D1",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":156,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0A6A2F06-753F-41A6-84E5-7F1AE340265E",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":158,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BDB743EA-A17B-406C-81CE-64A52FBB5966",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":160,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1BE00024-0295-43BE-8123-56526197B58E",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":162,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AE050A6F-DF2A-47E8-8188-59BC00C11E70",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":164,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8B91E4C9-31A7-4CA6-8641-F0D4AEA543BE",[],[],{"lastModified":11,"cacheTime":168,"version":22},1792372271302,{"score":170,"band":35,"action":171,"scoredAt":172},46,"Plan remediation","2026-10-17T06:36:48.677514+00:00"]