Re: Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:

[please-use-the-support-forum]

The mentioned vulnerabilities may be remedied by upgrading to v1.2.7:

http://www.zen-cart.com/modules/ipb/index.php?showtopic=41626