IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-04-15 15:16

MODIFIED

2026-04-15 15:16

EPSS (Prob. Exploit)

0.56%

Top 54.2%

DATA SOURCES:

NVD 🔗 2026-04-15 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-29

> DESCRIPTION

Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-ggmw-mjhv-75rm HIGH

NietThijmen ShoppingCart: Command injection in the connect function

AFFECTED PACKAGES:

GO / github.com/NietThijmen/ShoppingCart

<= 0.0.0-20241101155353-3dd137080276

> HISTORIQUE DES MODIFICATIONS

Première apparition

15/04/2026 15:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://github.com/Buckdray/vulnerability-research/blob/main/CVE-2024-53412/READ...