| 제목 | Zen Cart 2.2.2 Remote Code Execution |
|---|
| 설명 | The Zen Cart admin panel is vulnerable to Remote Code Execution (RCE) because it retrieves configuration settings from the database and passes them directly to the PHP eval() function without sufficient validation. In admin/configuration.php, the field set_function is retrieved and executed. An attacker can use a separate SQL injection to overwrite a configuration entry and then trigger the RCE by navigating to admin/configuration.php?gID=1. This allows execution of arbitrary system commands with the privileges of the web server user. |
|---|
| 원천 | ⚠️ https://cdkkx.github.io/posts/GHSA-233f-2p5c-vfgw.html |
|---|
| 사용자 | cdhhsk (UID 99312) |
|---|
| 제출 | 2026. 07. 09. AM 08:44 (4 개월 ago) |
|---|
| 모더레이션 | 2026. 10. 11. PM 01:10 (3 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416604 [Zen Cart 2.2.2 Admin Panel admin/configuration.php eval gID SQL 주입] |
|---|
| 포인트들 | 20 |
|---|