NetSight
IP …
critical10.0Public exploit code

CVE-2004-0241

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

Affected products

VendorProductAffected versions
QualiteamX-Cart
Versions 3.2.0, 3.2.1, 3.3.0, 3.3.2, 3.4.0, 3.4.3

References