osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
Vulnerability Description
osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to upload a .php file containing arbitrary code, which is then executed by the server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-20006
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- flyh4t
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/oscommerce_filemanager.rb
- https://www.exploit-db.com/exploits/9556
- https://www.exploit-db.com/exploits/16899
- https://www.oscommerce.com/
- https://www.vulncheck.com/advisories/oscommerce-arbitrary-php-code-execution
Affected Vendor
osCommerce
View all reports →