Vendor
A remote SQL injection vulnerability in the Zen Cart PayPal IPN Handler component allows unauthenticated attackers to execute arbitrary SQL commands via the txn_id parameter.