« Volver al listado

CVE-2004-0241

Estado: ModificadaAlta (10)—

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Qualiteam — X-cart

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0241",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-11-23T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=107582648326448&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/9560",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15034",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=107582648326448&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/9560",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15034",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php."
    },
    {
      "lang": "es",
      "value": "X-Cart 3.4.3 permite que atacantes remotos ejecuten comandos arbitrarios a través del argumento perl_binary en upgrade.php o general.php."
    }
  ],
  "lastModified": "2026-06-16T22:05:14.360",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D8A255F-6C87-4400-A6E3-F12A510E9483"
            },
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D648DB94-F9C6-42E6-919D-A4DCF0412CA5"
            },
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E7223D2-62D9-42D3-B408-49D880B648D3"
            },
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "493B9800-3D8F-4711-B0F6-C4667A6B4AA1"
            },
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D03FBE3-B36C-495C-96F3-427FECAA0ACD"
            },
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE3A8B97-1D7D-4BCB-8141-1E3A37628DE4"
            },
            {
              "criteria": "cpe:2.3:a:qualiteam:x-cart:3.4.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0179F0D3-BC83-4935-84AE-A34324380108"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}