CVE-2018-18573

osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subsequently achieve arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-05

Weaknesses

CWE-94

Affected products

• Oscommerce (Oscommerce)

References

• https://github.com/osCommerce/oscommerce2/issues/631