CVE-2018-18573

osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subsequently achieve arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI.
References
Link Resource
https://github.com/osCommerce/oscommerce2/issues/631 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oscommerce:oscommerce:2.3.4.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-08-22 15:15

Updated : 2024-02-04 20:20


NVD link : CVE-2018-18573

Mitre link : CVE-2018-18573

CVE.ORG link : CVE-2018-18573


JSON object : View

Products Affected

oscommerce

  • oscommerce
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')