CVE-2005-2330

Oscommerce - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Andrew Hunter · textwebappsphp

https://www.exploit-db.com/exploits/25994

View Code ZIP pw:eip

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/431012

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/18249

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/14294

Various Sources x_refsource_misc

http://www.oscommerce.com/community/bugs%2C2835

Product x_refsource_misc

http://sourceforge.net/mailarchive/message.php?msg_id=12318248

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/431068

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015944

Various Sources x_refsource_misc

http://retrogod.altervista.org/oscommerce_22_adv.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/25861

Scores

EPSS 0.1276

EPSS Percentile 94.1%

Details

Status published

Products (1)

oscommerce/oscommerce 2.2_ms2

Published Jul 20, 2005

Tracked Since Feb 18, 2026