Test ID:	1.3.6.1.4.1.25623.1.0.100661
Category:	Web application abuses
Title:	osCommerce Online Merchant <= 2.2 'file_manager.php' Remote Arbitrary File Upload Vulnerability
Summary:	Online Merchant module for osCommerce is prone to a remote; arbitrary-file-upload vulnerability because it fails to sufficiently sanitize user-supplied; input.
Description:	Summary: Online Merchant module for osCommerce is prone to a remote arbitrary-file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Vulnerability Impact: Attackers can exploit this issue to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation. Other attacks are also possible. Affected Software/OS: Online Merchant 2.2 is vulnerable. Other versions may also be affected. Solution: Delete the file 'file_manager.php' in your 'admin' directory. CVSS Score: 4.6 CVSS Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.