GHSA-38f9-4vhq-9cr8

Zen Cart vulnerable to authenticated remote code execution

Source: GitHub Advisory Database (reviewed) High CVE-2021-3291

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	zencart/zencart	< 1.5.7c	1.5.7c

Details

As written in the advisory (Markdown source, shown as plain text).

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-3291 advisory
https://github.com/zencart/zencart/commit/7447627f7148b11c614f89dab4a09d3f102b58af web
https://github.com/MucahitSaratar/zencart_auth_rce_poc web
https://github.com/zencart/zencart package
http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html web