What is CVE-2018-18573?

CVE-2018-18573 is a high-severity vulnerability in Oscommerce, classified under Code Injection. CVSS score: 7.2/10. Published 2019-08-22.

How severe is CVE-2018-18573?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Oscommerce

CVE-2018-18573

osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subsequently achieve arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.026 (83.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Oscommerce — versions 2.3.4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2018-18573?: CVE-2018-18573 is a high-severity vulnerability in Oscommerce, classified under Code Injection. CVSS score: 7.2/10. Published 2019-08-22.
How severe is CVE-2018-18573?: High severity. CVSS v3 base score is 7.2 out of 10.