vendor:
Oscommerce Online Merchant
by:
Flyff666
7,5
CVSS
HIGH
File Disclosure and Admin Bypass
200
CWE
Product Name: Oscommerce Online Merchant
Affected Version From: 2.2
Affected Version To: 2.2
Patch Exists: No
Related CWE: N/A
CPE: a:oscommerce:oscommerce_online_merchant
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: All OS
2010
Oscommerce Online Merchant v2.2 File Disclosure And Admin ByPass
An attacker can bypass the admin page authentication by appending /login.php to the end of the URL. Additionally, an attacker can download any file in the directory by appending /login.php?action=download&filename= to the end of the URL.
Mitigation:
Ensure that the admin folder is protected by .htaccess and that the URL is not vulnerable to manipulation.
