writeups.xyz / CS-Cart PDF Plugin Unauthenticated Command Injection

Submitter : c2a

Date: 3 March 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• OS Command Injection
• Security Code Review

Programs :

• CS-Cart

Authors :

• Ngo Wei Lin (@Creastery)

Link :
https://starlabs.sg/blog/2023/03-cs-cart-pdf-plugin-unauthenticated-command-injection/