Описание
oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:oscommerce:oscommerce:2.3.4.1:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00363
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-697
Связанные уязвимости
github
больше 3 лет назад
oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php
EPSS
Процентиль: 58%
0.00363
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-697