7 matches found
zencart_auth_rce_poc
zencartauthrcepoc CVE-2021-3291 1- iniciar sesión como administrador 2- ir a la página de edición de cualquier módulo 3- inspeccionar el elemento de cualquier radiobox con valor true 4- cambiar true a true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- hacer clic en actualizar 6- para ejecutar el...
CVE-2021-3291
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...
CVE-2021-3291
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...
CVE-2021-3291
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...
CVE-2021-3291: Improper Neutralization of Special Elements used in an OS Command
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...
PT-2021-19973
Name of the Vulnerable Software and Affected Versions Zen Cart version 1.5.7b Description The issue allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command. Recommendations For Zen Cart version 1.5.7b, as a...
