Spreecommerce versions prior to 0.60.2 contain a critical remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, allowing attackers to execute arbitrary shell commands on the server without authentication. This vulnerability poses a significant risk to the integrity and confidentiality of the affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 10 | CVE-2011-10019 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious request to the Spreecommerce application, specifically targeting the search[send][] parameter. By injecting arbitrary shell commands into this parameter, the attacker can execute commands on the server, potentially leading to full system compromise.
Affected Products
- Spreecommerce versions prior to 0.60.2: Vulnerable due to improper input sanitization in the search functionality.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to Spreecommerce version 0.60.2 or later, where the input sanitization issue has been addressed. Additionally, implementing web application firewalls and input validation can help prevent such attacks.