CVE-2009-2255
Zen Cart <= 1.3.8a - Unauthenticated Arbitrary File Upload via record_company_image Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-2255. PoCs published by BlackH.
AI-analyzed exploit summary This exploit targets a file upload vulnerability in Zen Cart 1.3.8, allowing remote code execution by uploading a malicious PHP file via the 'record_company.php' endpoint. It leverages the 'phpsploit' class to craft multipart/form-data requests and execute arbitrary commands.
Description
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images/.
Exploits (1)
This exploit targets a file upload vulnerability in Zen Cart 1.3.8, allowing remote code execution by uploading a malicious PHP file via the 'record_company.php' endpoint. It leverages the 'phpsploit' class to craft multipart/form-data requests and execute arbitrary commands.