What is CVE-2017-15285?

CVE-2017-15285 is a high-severity vulnerability in Qualiteam X-cart, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2017-10-12.

How severe is CVE-2017-15285?

High severity. CVSS v3 base score is 8.8 out of 10.

Improper input validation in Qualiteam X-cart

CVE-2017-15285

X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails to check remote file extensions before saving locally. This vulnerability can be exploited by anyon…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.021 (79.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualiteam X-cart — versions 5.2.23, 5.3.1.9, 5.3.2.13
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-15285?: CVE-2017-15285 is a high-severity vulnerability in Qualiteam X-cart, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2017-10-12.
How severe is CVE-2017-15285?: High severity. CVSS v3 base score is 8.8 out of 10.