CVE-2022-26521
Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Med...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manager>Images settings can be changed by an administrator (e.g., by configuring .php to be a valid image file type).
Références
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web github.com