vendor:
Zelta E Store
by:
ZoRLu
8.8
CVSS
HIGH
Remote File Upload/Bypass/R-SQL/B-SQL
89, 89, 89, 89
CWE
Product Name: Zelta E Store
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Zelta E Store RFU/BYPASS/R-SQL/B-SQL Multiple Remote Vulns
Zelta E Store is prone to multiple remote vulnerabilities, including remote file upload, authentication bypass, R-SQL and B-SQL injection. An attacker can exploit these issues to upload arbitrary files to the affected computer, bypass authentication, execute arbitrary SQL commands, and gain access to sensitive information. This may lead to further attacks.
Mitigation:
Users should apply the latest patches and updates provided by the vendor. Additionally, users should implement proper input validation and sanitization to prevent malicious input from entering the system.
