[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmohsjqlbLHe-ZcEZxZzzOfg36FNL7hxkDCIa28zbxq0":3,"g5a-risk:CVE-2018-18965":99},{"success":4,"data":5,"meta":97},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":56,"weaknessesCount":49,"isActivelyExploited":60,"cisaInfo":15,"otxData":15,"relatedBlogPosts":61,"seoMetadata":62,"configurations":87,"relatedVendorCves":95,"notableEvents":96},"CVE-2018-18965","What is CVE-2018-18965?","osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the \"product\" page. The .htaccess file in catalog\u002Fimages\u002F bans the html extension, but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename).","osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the \"product\" page. The .htaccess file in catalog\u002Fimages\u002F bans the html extension...","2018-11-06T04:29:00.287","2020-08-24T17:37:01.14",4.9,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",1.2,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":25,"IntegrityImpact":36,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01017,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"oscommerce","online_merchant","2.3.4.1","cpe:2.3:a:oscommerce:online_merchant:2.3.4.1:*:*:*:*:*:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002FosCommerce\u002Foscommerce2\u002Fissues\u002F631","GitHub",[55],"Third Party Advisory",[57],{"id":58,"name":58,"description":59},"Unknown","NVD-CWE-noinfo",false,[],{"title":63,"metaDescription":64,"keywords":65,"canonicalUrl":66,"structuredData":67},"What is CVE-2018-18965? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18965, a medium severity cyber security vulnerability from 2018. osCommerce 2.3.4.1 has an incomplete '.htaccess' for blac...","CVE-2018-18965, CVE-2018-18965 vulnerability, CVE-2018-18965 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, oscommerce security, online_merchant vulnerability","\u002Fwhat-is\u002Fcve-2018-18965",{"@context":68,"@type":69,"headline":63,"description":64,"datePublished":10,"dateModified":11,"author":70,"publisher":74,"about":78,"mainEntityOfPage":82,"articleSection":85,"keywords":86},"https:\u002F\u002Fschema.org","TechArticle",{"@type":71,"name":72,"url":73},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":71,"name":72,"url":73,"logo":75},{"@type":76,"url":77},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":79,"name":6,"description":80,"additionalType":81},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":83,"@id":84},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18965","Cybersecurity","CVE-2018-18965, CVE-2018-18965 vulnerability, CVE-2018-18965 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[88],{"Operator":15,"Negate":15,"Nodes":89},[90],{"Operator":91,"Negate":15,"CPEMatch":92},"OR",[93],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":94,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"187F2439-73A2-4EEC-B546-FF30600B848D",[],[],{"lastModified":11,"cacheTime":98,"version":33},1792367725265,{"score":100,"band":101,"action":102,"scoredAt":103},27,"Low","Monitor","2026-10-16T06:45:08.106417+00:00"]