Lucene search

[email protected]CVE-2004-0241

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0241

2004-11-2305:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0241

x-cart

remote command execution

upgrade.php

general.php

perl binary argument

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.09 Low

EPSS

Percentile

94.7%

JSON

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

Affected configurations

NVD

Node

qualiteamx-cartMatch3.2.0

qualiteamx-cartMatch3.2.1

qualiteamx-cartMatch3.3.0

qualiteamx-cartMatch3.3.2

qualiteamx-cartMatch3.4.0

qualiteamx-cartMatch3.4.3

qualiteamx-cartMatch3.4.11

CPENameOperatorVersion
qualiteam:x-cartqualiteam x-carteq3.2.0
qualiteam:x-cartqualiteam x-carteq3.2.1
qualiteam:x-cartqualiteam x-carteq3.3.0
qualiteam:x-cartqualiteam x-carteq3.3.2
qualiteam:x-cartqualiteam x-carteq3.4.0
qualiteam:x-cartqualiteam x-carteq3.4.3
qualiteam:x-cartqualiteam x-carteq3.4.11

CPE	Name	Operator	Version
qualiteam:x-cart	qualiteam x-cart	eq	3.2.0
qualiteam:x-cart	qualiteam x-cart	eq	3.2.1
qualiteam:x-cart	qualiteam x-cart	eq	3.3.0
qualiteam:x-cart	qualiteam x-cart	eq	3.3.2
qualiteam:x-cart	qualiteam x-cart	eq	3.4.0
qualiteam:x-cart	qualiteam x-cart	eq	3.4.3
qualiteam:x-cart	qualiteam x-cart	eq	3.4.11

References

marc.info/?l=bugtraq&m=107582648326448&w=2

www.securityfocus.com/bid/9560

exchange.xforce.ibmcloud.com/vulnerabilities/15034

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.09 Low

EPSS

Percentile

94.7%

JSON

Related for CVE-2004-0241

nvd1 cvelist1 nessus1