CVE-2017-15285 Information

Description

X-Cart 5.2.23 5.3.1.9 5.3.2.13 and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails to check remote file extensions before saving locally. This vulnerability can be exploited by anyone with Vendor access or higher. One attack methodology is to upload an image file in the Attachments section of a product catalog upload a .php file with an \Add File Via URL\ action and change the image’s Description URL to reference the .php URL in the attachments/ directory.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

https://sxcurity.github.io/PHP20Code20Injection20in20X-Cart.pdf

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8