CVE-2017-11675
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-11675
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11675.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-11675
- Aliases
- Published
- 2017-07-27T06:29:00Z
- Modified
- 2024-05-14T05:51:46.677850Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The traverseStrictSanitize function in admindir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the adminname array parameter to admin_dir/login.php, if there is an export of an error-log entry for that invalid array index.
- References