← back
CVE-2021-32172

CVE-2021-32172

EPSS 66.4%
Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/164445/Maian-Cart-3.8-Remote-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50394unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/164445/Maian-Cart-3.8-Remote-Code-Execution.htmlhttps://dreyand.github.io/maian-cart-rce/https://github.com/DreyAnd/maian-cart-rcehttps://www.maianscriptworld.co.uk/