Multiple vulnerabilities in CubeCart

Overview CubeCart provided by CubeCart Limited contains multiple vulnerabilities listed below. Cross-site request forgery CWE-352 - CVE-2023-38130 Directory traversal CWE-22 - CVE-2023-42428 Directory traversal CWE-22 - CVE-2023-47283 OS command injection CWE-78 - CVE-2023-47675 Gen Sato of Mitsu...

CVE-2023-47675

CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command...

CVE-2023-47283

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system...

CVE-2023-38130

Cross-site request forgery CSRF vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system...

CVE-2023-47675

CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command...

CVE-2023-38130

Cross-site request forgery CSRF vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system...

CVE-2023-42428

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system...

CVE-2023-47283

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system...

CVE-2023-42428

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system...

Directory traversal

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system...

Directory traversal

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system...

Command injection

CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command...

CVE-2023-47675

CubeCart before 6.5.3 is vulnerable to CVE-2023-47675: an OS command injection allows a remote authenticated admin to execute arbitrary commands. The issue affects CubeCart versions prior to 6.5.3; no impact is stated for later versions. The recommended fix is to update to CubeCart 6.5.3 or later...

CVE-2023-47675

CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command...

CVE-2023-47283

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system...

CVE-2023-47283

CVE-2023-47283 – CubeCart : A directory traversal vulnerability exists in CubeCart versions prior to 6.5.3. An remote authenticated attacker with administrative privileges may obtain files from the system. The issue is fixed by updating to CubeCart 6.5.3 or later. If upgrading is not feasible, re...

CVE-2023-42428

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system...

CVE-2023-42428

CVE-2023-42428 affects CubeCart versions prior to 6.5.3. A directory traversal vulnerability exists that, in the presence of administrative privileges, could allow a remote authenticated attacker to delete directories and files in the system. The issue is associated with CubeCart’s pre-6.5.3 code...

CVE-2023-38130

The CVE-2023-38130 CSRF vulnerability affects CubeCart versions prior to 6.5.3, allowing a remote, unauthenticated attacker to delete data in the system. The issue originates from CubeCart’s handling of CSRF in requests and is listed with a base impact of high on integrity and availability (per C...