CVE-2020-27976

CRITICAL

Oscommerce < 1.0.5.4 - OS Command Injection

Title source: rule

Description

osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option.

Exploits (1)

nomisec WORKING POC 5 stars

by k0rnh0li0 · poc

https://github.com/k0rnh0li0/CVE-2020-27976

View Code ZIP pw:eip

References (1)

[Exploit, Third Party Advisory] https://herolab.usd.de/security-advisories/usd-2020-0026/

Scores

CVSS v3 9.8

EPSS 0.2002

EPSS Percentile 95.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (1)

oscommerce/oscommerce < 1.0.5.4

Published Oct 28, 2020

Tracked Since Feb 18, 2026