CVE-2004-0241: Qualiteam X-Cart

High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days.

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

Affected products

• Qualiteam X-Cart: version 3.2.0 only; version 3.2.1 only; version 3.3.0 only; version 3.3.2 only; version 3.4.0 only; version 3.4.3 only; …

Published 2004-11-23. Last modified 2026-06-16.