[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-06 17:44 UTC
Importiert: 2026-10-15 08:09 UTC
Quelle-ID: full_disc
uid_hash: 1a3d51e9af764a7b536a5c599dfde6d46c50275e8f78d32eb9a3810fc91b2ab1

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian

Cart 3.8, the self-hosted PHP shopping-cart system from Maian Media (Maian

Script World), verified end to end against a real installation of that

version.

Type: unrestricted upload of a file with a dangerous type (CWE-434), realized

as OS command execution (CWE-78) through an attacker-supplied PHP webshell,

with CWE-269 bearing on the execution privilege context. The...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss