CVE-2014-3990

Опубликовано: 20 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery (SSRF) attacks or possibly conduct XML External Entity (XXE) attacks and execute arbitrary code via a crafted serialized PHP object, related to the quantity parameter in an update request.

Ссылки

http://karmainsecurity.com/KIS-2014-08
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/67
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/archive/1/532763/100/0/threaded
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/68529
Third Party Advisory
VDB Entry
https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076f
Issue Tracking
Patch
Third Party Advisory
http://karmainsecurity.com/KIS-2014-08
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/67
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/archive/1/532763/100/0/threaded
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/68529
Third Party Advisory
VDB Entry
https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076f
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*

Версия до 1.5.6.4 (включая)

EPSS

Процентиль: 93%

0.10961

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-7mhh-43p3-3rjq