[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feDRTFnmBw2EWpvB-22kMS6uL8oUyrJ5__h6rTBwHF9I":3,"g5a-risk:CVE-2018-18966":110},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":66,"cisaInfo":15,"otxData":15,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":106,"notableEvents":107},"CVE-2018-18966","What is CVE-2018-18966?","osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the \"product\" page. The .htaccess file in catalog\u002Fimages\u002F bans the html extension, but Internet Explorer render HTML elements in a .eml file.","osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the \"product\" page. The .htaccess file in catalog\u002Fimages\u002F bans the html extension...","2018-11-06T04:29:00.317","2020-08-24T17:37:01.14",4.9,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",1.2,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":25,"IntegrityImpact":36,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01017,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"oscommerce","online_merchant","2.3.4.1","cpe:2.3:a:oscommerce:online_merchant:2.3.4.1:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"microsoft","internet_explorer","-","cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*",2,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fgithub.com\u002FosCommerce\u002Foscommerce2\u002Fissues\u002F631","GitHub",[60],"Third Party Advisory",1,[63],{"id":64,"name":64,"description":65},"Unknown","NVD-CWE-noinfo",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2018-18966? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18966, a medium severity cyber security vulnerability from 2018. osCommerce 2.3.4.1 has an incomplete '.htaccess' for blac...","CVE-2018-18966, CVE-2018-18966 vulnerability, CVE-2018-18966 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, oscommerce security, microsoft security, online_merchant vulnerability, internet_explorer vulnerability","\u002Fwhat-is\u002Fcve-2018-18966",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":10,"dateModified":11,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18966","Cybersecurity","CVE-2018-18966, CVE-2018-18966 vulnerability, CVE-2018-18966 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":95,"Negate":15,"Nodes":96},"AND",[97,102],{"Operator":98,"Negate":15,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":101,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"187F2439-73A2-4EEC-B546-FF30600B848D",{"Operator":98,"Negate":15,"CPEMatch":103},[104],{"Vulnerable":15,"Criteria":53,"MatchCriteriaID":105,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C37BA825-679F-4257-9F2B-CE2318B75396",[],[],{"lastModified":11,"cacheTime":109,"version":33},1792364671997,{"score":111,"band":112,"action":113,"scoredAt":114},27,"Low","Monitor","2026-10-16T06:45:08.106739+00:00"]