Code injection

2007-09-1818:17:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON

admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel.

CPENameOperatorVersion
shop-scriptle2.0

CPE	Name	Operator	Version
	shop-script	le	2.0

References

osvdb.org/40149

secunia.com/advisories/26840

www.securityfocus.com/bid/25695

exchange.xforce.ibmcloud.com/vulnerabilities/36646

www.exploit-db.com/exploits/4419