CVE-2007-4933: Code Injection

Published Sep 18, 2007

Updated

Direct static code injection vulnerability in includes/admin/sub/confappearence.php in Shop-Script FREE 2.0 and earlier allows remote attackers to inject arbitrary PHP code into cfg/appearence.inc.php via a saveappearence action in admin.php, as demonstrated with the (1) productscount, (2) colscount, and (3) darkcolor parameters.

Affected Software

1 affected component

Shop-Script Shop-Script=2.0

Event History

Sep 18, 2007

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

Which deployments are affected?

Shop-Script FREE 2.0 and earlier are affected. The issue is in the appearance configuration save functionality handled through admin.php.

What does an attacker need to exploit this issue?

The vulnerability is remotely exploitable with low attack complexity and requires no authentication according to the supplied vector. An attacker can submit malicious values through the save_appearence action using parameters such as productscount, colscount, or darkcolor.

What is the impact of successful exploitation?

Successful exploitation allows arbitrary PHP code to be written into cfg/appearence.inc.php. This can compromise confidentiality, integrity, and availability.

CVE-2007-4933: Code Injection

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?