[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAEn1RvR38X4-I4qjINKyqvCxUh3XYDbCu_msIvzmhGY":3,"g5a-risk:CVE-2018-18964":99},{"success":4,"data":5,"meta":97},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":56,"weaknessesCount":49,"isActivelyExploited":60,"cisaInfo":15,"otxData":15,"relatedBlogPosts":61,"seoMetadata":62,"configurations":87,"relatedVendorCves":95,"notableEvents":96},"CVE-2018-18964","What is CVE-2018-18964?","osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the \"product\" page. The .htaccess file in catalog\u002Fimages\u002F bans the html extension, but there are several extensions in which contained HTML can be executed, such as the svg extension.","osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the \"product\" page. The .htaccess file in catalog\u002Fimages\u002F bans the html extension...","2018-11-06T04:29:00.24","2020-08-24T17:37:01.14",4.9,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",1.2,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":25,"IntegrityImpact":36,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01017,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"oscommerce","online_merchant","2.3.4.1","cpe:2.3:a:oscommerce:online_merchant:2.3.4.1:*:*:*:*:*:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002FosCommerce\u002Foscommerce2\u002Fissues\u002F631","GitHub",[55],"Third Party Advisory",[57],{"id":58,"name":58,"description":59},"Unknown","NVD-CWE-noinfo",false,[],{"title":63,"metaDescription":64,"keywords":65,"canonicalUrl":66,"structuredData":67},"What is CVE-2018-18964? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18964, a medium severity cyber security vulnerability from 2018. osCommerce 2.3.4.1 has an incomplete '.htaccess' for blac...","CVE-2018-18964, CVE-2018-18964 vulnerability, CVE-2018-18964 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, oscommerce security, online_merchant vulnerability","\u002Fwhat-is\u002Fcve-2018-18964",{"@context":68,"@type":69,"headline":63,"description":64,"datePublished":10,"dateModified":11,"author":70,"publisher":74,"about":78,"mainEntityOfPage":82,"articleSection":85,"keywords":86},"https:\u002F\u002Fschema.org","TechArticle",{"@type":71,"name":72,"url":73},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":71,"name":72,"url":73,"logo":75},{"@type":76,"url":77},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":79,"name":6,"description":80,"additionalType":81},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":83,"@id":84},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18964","Cybersecurity","CVE-2018-18964, CVE-2018-18964 vulnerability, CVE-2018-18964 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[88],{"Operator":15,"Negate":15,"Nodes":89},[90],{"Operator":91,"Negate":15,"CPEMatch":92},"OR",[93],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":94,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"187F2439-73A2-4EEC-B546-FF30600B848D",[],[],{"lastModified":11,"cacheTime":98,"version":33},1792367706956,{"score":100,"band":101,"action":102,"scoredAt":103},27,"Low","Monitor","2026-10-16T06:45:08.106076+00:00"]