CVE-2021-3291: OS Command Injection

January 26, 2021 (updated March 9, 2021)

Zen Cart b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

References

packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html
nvd.nist.gov/vuln/detail/CVE-2021-3291

Code Behaviors & Features

Detect and mitigate CVE-2021-3291 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →