PT-2011-4978 · Oscommerce · Oscommerce

Published 2011-12-05 · Updated 2018-01-06 · CVE-2011-4543

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions osCommerce version 3.0.2

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by manipulating the set or module parameter in various PHP files, such as /OM/Core/Site/Admin/Application/templates modules/pages/info.php, /OM/Core/Site/Admin/Application/templates modules/pages/edit.php, and others. Additionally, vulnerabilities exist in other parameters like filter and template across different pages.

Recommendations For osCommerce version 3.0.2, consider disabling access to the vulnerable PHP files until a patch is available. Restrict the use of the set, module, filter, and template parameters in the affected API endpoints to minimize the risk of exploitation. Avoid using these parameters in the specified pages, such as /OM/Core/Site/Admin/Application/templates modules/pages/info.php, until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-4543

Affected Products

Oscommerce

References · 5

• 🔥 https://dognaedis.com/vulns/DGS-SEC-4.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4543 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4543 · Note
• http://secunia.com/advisories/48308 · Note
• http://securityfocus.com/bid/50793 · Note