Language:
Severity: High
ID: 42350
File Name: oscommerce_filemanager_cmd_injection_safe.nasl
Version: 1.12
Type: remote
Family: CGI abuses
Published: 11/3/2009
Updated: 6/1/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Required KB Items: www/oscommerce
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 8/31/2009
Elliot (osCommerce 2.2 File Upload)