Vulnerability in N/a
CVE-2021-32172
Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.
EPSS: 0.655 (98.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.maianscriptworld.co.uk/ (x_refsource_MISC)
- dreyand.github.io/maian-cart-rce/ (x_refsource_MISC)
- github.com/DreyAnd/maian-cart-rce (x_refsource_MISC)
- packetstormsecurity.com/files/164445/Maian-Cart-3.8-Remote-Code-Execution.html (x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-32172?
- CVE-2021-32172 is a vulnerability in N/a. Published 2021-10-07.
- Is CVE-2021-32172 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.