PT-2011-4978 · Oscommerce · Oscommerce

Publicado 2011-12-05 · Atualizado 2018-01-06 · CVE-2011-4543

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions osCommerce version 3.0.2

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by manipulating the set or module parameter in various PHP files, such as /OM/Core/Site/Admin/Application/templates modules/pages/info.php, /OM/Core/Site/Admin/Application/templates modules/pages/edit.php, and others. Additionally, vulnerabilities exist in other parameters like filter and template across different pages.

Recommendations For osCommerce version 3.0.2, consider disabling access to the vulnerable PHP files until a patch is available. Restrict the use of the set, module, filter, and template parameters in the affected API endpoints to minimize the risk of exploitation. Avoid using these parameters in the specified pages, such as /OM/Core/Site/Admin/Application/templates modules/pages/info.php, until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-4543

Produtos afetados

Oscommerce

Referências · 5

• 🔥 https://dognaedis.com/vulns/DGS-SEC-4.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4543 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4543 · Nota
• http://secunia.com/advisories/48308 · Nota
• http://securityfocus.com/bid/50793 · Nota