💣Exploit CVE-2021-47667 - ZendTo OS Command Injection Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2021-47667
Published : April 5, 2025, 5:15 a.m. | 1 hour, 29 minutes ago
Description : An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.