4 matches found
EUVD-2022-3551
Malicious code in bioql PyPI...
GHSA-C9R9-3H38-R7VJ Authenticated RCE in Zen Cart 1.5.5e
The traverseStrictSanitize function in admindir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the adminname array parameter to...
ZenCart Authentication Code Execution Vulnerability
ZenCart is an open source shopping cart system developed by Zen Cart team, it is mainly used to establish online stores, which can support a variety of payment methods, multi-language options, online shopping mall batch update and so on. A security vulnerability exists in the...
CVE-2017-11675
The traverseStrictSanitize function in admindir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the adminname array parameter to...