Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/11/2017 Updated: 20/12/2017

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

The files function in the administration section in CS-Cart 4.6.2 and previous versions allows malicious users to execute arbitrary PHP code via vectors involving a custom page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cs-cart cs-cart

CS Cart version 462 suffers from a remote shell upload vulnerability ...

CS-Cart templatesmanage Server Side Template Injection Remote Code Execution Vulnerability Found by: Steven Seeley of 360 Vulcan Team Version: <= 412x (latest) Date: 2021-01-08 12:49 CVE: CVE-2021-26121 Disclosure Timeline 2021-01-26 – Sent to CSCart dev team 2021-01-27 – Notification of reciept from CSCart dev team 2021-02-10 – Response from CSCart

CWE-434 http://packetstormsecurity.com/files/145096/CSC-Cart-4.6.2-Shell-Upload.html https://nvd.nist.gov https://github.com/sourceincite/CVE-2021-26121 https://packetstormsecurity.com/files/145096/CS-Cart-4.6.2-Shell-Upload.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-15673

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect