CVE-2022-26521
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 9.6%
from disclosure to weapon383 days
Published on NVDMar 7
1st PoC+383d
exploitation probability
9.6%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manager>Images settings can be changed by an administrator (e.g., by configuring .php to be a valid image file type).
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/51058cve_referencepacketstormsecurity.com/files/171487/Abantecart-1.3.2-Remote-Code-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.