Arbitrary PHP Code Execution Vulnerability in osCommerce by osCommerce
CVE-2018-18573

7.2HIGH

Key Information:

Vendor

Oscommerce

Status
Oscommerce
Vendor
CVE Published:
22 August 2019

What is CVE-2018-18573?

osCommerce 2.3.4.1 contains a vulnerability due to an incomplete '.htaccess' configuration in the product page. This flaw enables remote authenticated administrators to upload malicious '.htaccess' files, which can bypass security restrictions by omitting specific directives, such as preventing PHP file execution. Consequently, attackers can exploit this weakness to execute arbitrary PHP code through specially crafted requests to the categories.php endpoint, significantly compromising the security of the affected web application.

References

https://github.com/osCommerce/oscommerce2/issues/631
x_refsource_CONFIRM

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.