Lucene search

[email protected]CVE-2004-0241

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0241

2004-11-2305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0241

x-cart

remote command execution

upgrade.php

general.php

perl binary argument

nvd

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.09 Low

EPSS

Percentile

94.5%

JSON

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

CPENameOperatorVersion
qualiteam:x-cartqualiteam x-carteq3.2.0
qualiteam:x-cartqualiteam x-carteq3.3.2
qualiteam:x-cartqualiteam x-carteq3.4.3
qualiteam:x-cartqualiteam x-carteq3.4.11
qualiteam:x-cartqualiteam x-carteq3.3.0
qualiteam:x-cartqualiteam x-carteq3.2.1
qualiteam:x-cartqualiteam x-carteq3.4.0

CPE	Name	Operator	Version
qualiteam:x-cart	qualiteam x-cart	eq	3.2.0
qualiteam:x-cart	qualiteam x-cart	eq	3.3.2
qualiteam:x-cart	qualiteam x-cart	eq	3.4.3
qualiteam:x-cart	qualiteam x-cart	eq	3.4.11
qualiteam:x-cart	qualiteam x-cart	eq	3.3.0
qualiteam:x-cart	qualiteam x-cart	eq	3.2.1
qualiteam:x-cart	qualiteam x-cart	eq	3.4.0

References

marc.info/?l=bugtraq&m=107582648326448&w=2

www.securityfocus.com/bid/9560

exchange.xforce.ibmcloud.com/vulnerabilities/15034

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.09 Low

EPSS

Percentile

94.5%

JSON

Related for CVE-2004-0241

nessus1