Medium severity · published Mar 21, 2024
CVE-2024-22724
An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature
6.6
CVSS
0.3%
EPSS
No
On KEV
Description
An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Oscommerce · Oscommerce
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-22724
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-22724
Exploit
https://github.com/osCommerce/osCommerce-V4/issues/62
Exploit
https://medium.com/%40cupc4k3/oscommerce-v4-rce-unveiling-the-file-upload-bypass-threat-f1ac0097880c
More from Oscommerce
9.8
CVE-2023-6579
A vulnerability, which was classified as critical, has been found in osCommerce 4
9.8
CVE-2020-23360
oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in…
9.8
CVE-2020-27976
osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely
9.3
CVE-2009-20006
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
8.8
CVE-2020-27975
osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF