zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- 以管理员身份登录 2- 打开任意模块的编辑页面 3- 检查任意值为 true 的单选框元素 4- 将 true 改为 true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- 点击更新 6- 要触发命令，再次进入编辑页面 CVE-2021-3291 https://vulners.com/cve/CVE-2021-3291 POC 漏洞利用 刷新页面 放大 Metasploit GIF...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

PT-2021-19973

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.5.7b Description The issue allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command. Recommendations For Zen Cart version 1.5.7b, as a...

CVE-2021-3291: Improper Neutralization of Special Elements used in an OS Command

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- login as admin 2- g...