CVE-2018-18573: Code Injection

Published Aug 22, 2019

Updated

osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subsequently achieve arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=newproduct URI.

Affected Software

1 affected component

osCommerce oscommerce=2.3.4.1

Event History

Aug 22, 2019

CVE Published

via MITRE·02:34 PM

Data Sourced

via MITRE·02:34 PM

Description

Frequently Asked Questions

What is CVE-2018-18573?

CVE-2018-18573 is a vulnerability in osCommerce 2.3.4.1 that allows remote authenticated administrators to achieve arbitrary PHP code execution.

How can remote authenticated administrators exploit CVE-2018-18573?

Remote authenticated administrators can upload new '.htaccess' files with arbitrary PHP code execution through the '/catalog/admin/categories.php?cPath=&action=new_produ' page.

What is the severity of CVE-2018-18573?

CVE-2018-18573 has a severity rating of 7.2 (high).

What is the affected version of osCommerce?

osCommerce version 2.3.4.1 is affected by CVE-2018-18573.

Is there a fix available for CVE-2018-18573?

Yes, there is a fix available for CVE-2018-18573. It is recommended to update to the latest version of osCommerce.