Vulnerability Details : CVE-2018-18965
osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename).
Products affected by CVE-2018-18965
- cpe:2.3:a:oscommerce:online_merchant:2.3.4.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-18965
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 23 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-18965
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:P/A:N |
8.0
|
2.9
|
NIST | |
|
4.9
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
1.2
|
3.6
|
NIST |
References for CVE-2018-18965
-
https://github.com/osCommerce/oscommerce2/issues/631
osCommerce 2.3.4.1 allows to execute several file types. · Issue #631 · osCommerce/oscommerce2 · GitHubThird Party Advisory
Jump to