Inadequate Access Control in osCommerce by osCommerce!
CVE-2018-18964

4.9MEDIUM

Key Information:

Vendor

Oscommerce

Status
Online Merchant
Vendor
CVE Published:
6 November 2018

What is CVE-2018-18964?

osCommerce version 2.3.4.1 contains a vulnerability related to inadequate access control on the product page. The incomplete configuration of the '.htaccess' file located in the 'catalog/images/' directory allows for insufficient filtering of malicious file extensions. While HTML file extensions are banned, other extensions such as SVG can be exploited to execute HTML code. This oversight heightens the risk of cross-site scripting (XSS) attacks, potentially compromising the security of the application and its users.

References

https://github.com/osCommerce/oscommerce2/issues/631
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.