Zen Cart vulnerable to authenticated remote code execution
Date: 2022-05
Affected: composer/zencart/zencart
Attack vector: command-injection
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2021-3291
CWE: CWE-78
CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.


Mitigations:

Architectural layers (MAESTRO):