PT-2018-14749 · Oscommerce · Oscommerce

Hexifeo · Published 2018-11-06 · Updated 2020-08-24 · CVE-2018-18966

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1

Description The issue concerns an incomplete '.htaccess' file for blacklist filtering in the product page of osCommerce. Specifically, the .htaccess file in the catalog/images/ directory bans the html extension, but Internet Explorer can render HTML elements in a .eml file.

Recommendations For osCommerce version 2.3.4.1, consider updating the .htaccess file in the catalog/images/ directory to properly handle .eml files and prevent the rendering of HTML elements within them. As a temporary workaround, restrict access to the catalog/images/ directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2018-18966

Affected Products

Oscommerce

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-18966 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18966 · Vendor Advisory
• https://github.com/osCommerce/oscommerce2/issues/631 · Note