CVE-2022-26521

Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media…

published March 7, 2022

CVSS

—

EPSS

10%

Percentile

95.5

In the wild

Unconfirmed

What it is

Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manager>Images settings can be changed by an administrator (e.g., by configuring .php to be a valid image file type).

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.09796 · 95.5th percentile
Published: 2022-03-07T00:00Z

EPSS history

Timeline

07 MAR 00:00Z
Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media…
cvelistv5