Improper input validation in Qualiteam X-Cart
CVE-2017-15285
X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails to check remote file extensions before saving locally. This vulnerability can be exploited by anyone with Vendor access or higher. One attack methodology is to upload an image file in the Attachments section of a product catalog, upload a .php file with an "Add File Via URL" action, and change the image's Description URL to reference the .php URL in the attachments/ directory.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.021 (80.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 80.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: 0.000
Affected products
- Qualiteam X-Cart — versions 5.2.23, 5.3.1.9, 5.3.2.13
Weakness classification (CWE)
References
- sxcurity.github.io/PHP Code Injection in X-Cart.pdf (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2017-15285?
- CVE-2017-15285 is a high-severity vulnerability in Qualiteam X-Cart, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2017-10-12.
- How severe is CVE-2017-15285?
- High severity. CVSS v3 base score is 8.8 out of 10.