Description
osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but Internet Explorer render HTML elements in a .eml file.
Unscored
CVE-2018-18966
EUVD-2018-10670GHSA-63rf-qrfc-rr7q
osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans …
Published Nov 6, 2018 · Updated Aug 5, 2024 · Assigned by mitre