{"id":"GHSA-c9r9-3h38-r7vj","aliases":["CVE-2017-11675"],"title":"Authenticated RCE in Zen Cart 1.5.5e","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the admin_name array parameter to admin_dir/login.php, if there is an export of an error-log entry for that invalid array index.","severity":"high","score":8.8,"published":"2022-05-17T02:20:07.000Z","modified":"2026-09-10T03:49:32.702Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"zencart/zencart","sources":[{"name":"OSV · GHSA-c9r9-3h38-r7vj","url":"https://osv.dev/vulnerability/GHSA-c9r9-3h38-r7vj"}],"ranges":[{"events":[{"introduced":"0"}],"type":"ECOSYSTEM"}],"versions":["v1.5.6","v1.5.6a","v1.5.6b","v1.5.6b-2019-05-27","v1.5.7","v1.5.7a","v1.5.7b","v1.5.8","v1.5.8-alpha2","v1.5.8a","v2.0.0","v2.0.0-alpha1","v2.0.0-beta1","v2.0.0-rc1","v2.0.0-rc2","v2.0.1","v2.1.0","v2.1.0-alpha1","v2.1.0-alpha2","v2.1.0-beta1","v2.2.0-alpha","v2.2.1","v2.2.2"],"fixed":[]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-11675","https://github.com/imp0wd3r/vuln-papers/tree/master/zencart-155e-auth-rce"],"sources":[{"name":"OSV","id":"GHSA-c9r9-3h38-r7vj","modified":"2026-09-10T03:49:32.702935249Z","url":"https://osv.dev/vulnerability/GHSA-c9r9-3h38-r7vj"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T16:00:31.263Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}