693 matches found
CVE-2018-20703
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
CVE-2018-20703
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
CVE-2018-20703
CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...
CVE-2018-20703
CubeCart v6.2.2 is affected by a Reflected XSS vulnerability exposed via a /{ADMIN-FILE}/ query string. The issue is described consistently across multiple sources (NVD and related feeds) as CubeCart 6.2.2 Reflected XSS. The root cause in the public descriptions is not dissected beyond the query ...
CubeCart 6.2.2 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in CubeCart Affected Software: CubeCart Affected Versions: 6.2.2 Homepage...
CubeCart 6.2.2 Cross Site Scripting
Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in CubeCart Affected Software: CubeCart Affected Versions: 6.2.2 Homepage: https://www.cubecart.com/ Vulnerability: Reflected...
CubeCart < 3.0.12 - Multiple Vulnerabilities
Exploit for php platform in category web applications CubeCart Multiple Vulnerabilities Vendor: Devellion Limited Product: CubeCart Version: = 3.0.12 Website: http://www.cubecart.com BID: 19782 CVE: CVE-2006-4525 OSVDB: 28279 28280 28281 SECUNIA: 21659 Description: CubeCart is a very popular web...
CubeCart 6.1.12 - Admin Authentication Bypass
I Forgot My Password! Both vulnerabilities are exploitable through CubeCarts "I forgot my Password!" functionality. It is implemented in the file classes/cubecart.class.php, in the method recovery. When a user forgot his password, he can use this feature to enter his email address, a valid passwo...
CVE-2017-2117
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
CVE-2017-2098
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
CVE-2017-2090
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors...
CVE-2017-2090
CVE-2017-2090 is described in connected documents as a directory traversal vulnerability in CubeCart versions prior to 6.1.4, allowing remote authenticated attackers to read arbitrary files via unspecified vectors. Affected product: CubeCart 6.x prior to 6.1.4. Root cause/impact: directory traver...
CVE-2017-2098
CubeCart has a directory traversal vulnerability (CVE-2017-2098) in versions prior to 6.1.4. A remote authenticated attacker can read arbitrary files on the server via unspecified vectors. Public sources (NVD/JVN) confirm the affected product and impact; several advisories recommend updating to t...
CVE-2017-2090
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors...
CVE-2017-2117
CVE-2017-2117 is a directory traversal vulnerability in CubeCart versions prior to 6.1.5. The issue allows an attacker with administrator rights to read arbitrary files outside the CubeCart directory via unspecified vectors. The reliable sources (JVN/JVNDB and NVD) confirm the affected product an...