Lucene search

K
osvGoogleOSV:GHSA-38F9-4VHQ-9CR8
HistoryMay 24, 2022 - 5:40 p.m.

Zen Cart vulnerable to authenticated remote code execution

2022-05-2417:40:23
Google
osv.dev
4
zen cart security
remote code execution
authenticated vulnerability
os command execution
html input element

EPSS

0.03

Percentile

91.1%

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

EPSS

0.03

Percentile

91.1%