CVE-2004-0241
X-Cart 3.4.3 - Remote Code Execution via perl_binary Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0241. PoCs published by Philip.
AI-analyzed exploit summary This exploit targets X-Cart's upgrade.php script, which fails to sanitize URI parameters. By manipulating the 'perl_binary' parameter, an attacker can execute arbitrary commands (e.g., '/bin/rm -rf') on the server.
Description
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.
Exploits (2)
This exploit targets X-Cart's upgrade.php script, which fails to sanitize URI parameters. By manipulating the 'perl_binary' parameter, an attacker can execute arbitrary commands (e.g., '/bin/rm -rf') on the server.
This exploit leverages an unsanitized parameter in X-Cart's admin interface to inject arbitrary commands via the 'config[General][perl_binary]' parameter, leading to remote command execution (RCE). The PoC demonstrates command injection by appending a command to the intended binary path.