high7.2Public exploit code
CVE-2021-3291
Zen Cart vulnerable to authenticated remote code execution
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zen Cart 1.5.7b - Remote Code Execution (Authenticated)2021-03-02 · webapps · php · Verified
Impact
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | zencart/zencart | <= 1.5.7b | 1.5.7c |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zen-Cart | Zen Cart | Version 1.5.7b |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html
- https://github.com/MucahitSaratar/zencart_auth_rce_poc
- https://github.com/advisories/GHSA-38f9-4vhq-9cr8
- https://nvd.nist.gov/vuln/detail/CVE-2021-3291
- https://github.com/zencart/zencart/commit/7447627f7148b11c614f89dab4a09d3f102b58af