What is GHSA-c9r9-3h38-r7vj?

GHSA-c9r9-3h38-r7vj is a security advisory published by GitHub Security Advisories with High severity. Authenticated RCE in Zen Cart 1.5.5e

Which CVE IDs does GHSA-c9r9-3h38-r7vj cover?

GHSA-c9r9-3h38-r7vj covers the following CVE IDs: CVE-2017-11675. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c9r9-3h38-r7vj?

GHSA-c9r9-3h38-r7vj has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-c9r9-3h38-r7vj?

GHSA-c9r9-3h38-r7vj affects 1 product, including: composer/zencart/zencart:\u003c 1.5.5e.

GHSA-c9r9-3h38-r7vjHighCVSS 8.8

Authenticated RCE in Zen Cart 1.5.5e

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

July 7, 2023

🔗 CVE IDs covered (1)

CVE-2017-11675 →

📋 Description

The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the admin_name array parameter to admin_dir/login.php, if there is an export of an error-log entry for that invalid array index.

🎯 Affected products1

composer/zencart/zencart:< 1.5.5e

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-11675
https://github.com/imp0wd3r/vuln-papers/tree/master/zencart-155e-auth-rce
https://github.com/advisories/GHSA-c9r9-3h38-r7vj