vendor:
zencart
by:
Mucahit Saratar
7.2
CVSS
HIGH
Authenticated Remote Code Execution
78
CWE
Product Name: zencart
Affected Version From: 1.5.7b
Affected Version To: 1.5.7b
Patch Exists: NO
Related CWE: CVE-2021-3291
CPE: a:zencart:zencart:1.5.7b
Platforms Tested: php
2021
zencart authenticated remote code execution exploit
This exploit module allows execution of OS commands in zencart.
Mitigation:
Update to a patched version of zencart