Abantecart through 1.3.2 allows... CVE-2022-26521

6.5 AV AC AU C I A
发布： 2022-03-10
修订： 2024-11-21

Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manager>Images settings can be changed by an administrator (e.g., by configuring .php to be a valid image file type).

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息