CVE-2013-1465

2013-02-08T15:55:01
ID CVE-2013-1465
Type cve
Reporter NVD
Modified 2017-08-28T21:33:09

Description

The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object.