Zen Cart version 1.1.2d fails to properly validate user-supplied input and in turn allows remote attackers the ability to perform SQL injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33375/zencart112d.txt
Source: https://packetstormsecurity.com/files/33375/zencart112d.txt.html