CVE-2018-18965 File upload in n/a
Attackers can upload malicious files with bypassed extensions to execute arbitrary code via the product image upload feature.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-18965?
CVE-2018-18965 is a medium-severity vulnerability in n/a, published on 6 Nov 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename).
Which versions are affected by CVE-2018-18965?
It affects 1 product.
Products include Oscommerce Online Merchant.
How do I fix CVE-2018-18965?
No fix has been published for CVE-2018-18965 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-18965 being exploited?
There is no known exploitation of CVE-2018-18965 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-q34m-cx6f-fm77.