CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command

published January 26, 2021

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16976 · 97.1th percentile
Published
2021-01-26T06:47Z
EPSS history
Timeline
  • 26 JAN 06:47Z
    Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command
    cvelistv5