CVE-2024-34832

CubeCart - ディレクトリトラバーサルによるRCEの可能性 CVE-2024-34832 TL;DR 管理パネルでは、g や node といったパラメータが、.inc.php ファイルを含めるためのパス構築やPHPコードの実行に使用されます。サーバ上の任意の場所に .inc.php ファイルをアップロードできる悪意のあるユーザーは、パストラバーサル脆弱性を悪用してそれらのファイルをインクルードし、悪意のあるコードを実行できます。 前提条件 管理パネルへのアクセス権（権限は一切不要を含め、どのような権限でも動作します） サーバ上の任意の場所に .inc.php...

CVE-2024-33438

임의 파일 업로드로 인한 RCE CVE-2024-33438 CubeCart 실행 후, 성공적인 악용에 대한 예상 출력은 다음과 같습니다: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please wait... + Trying to log into the application... + Successful...

CVE-2026-54646

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

CVE-2026-54643

CubeCart is an ecommerce software solution. Prior to 6.7.5, the delete-note handler in admin/sources/orders.index.inc.php verifies only the presence of orderid and delete-note parameters before deleting records from CubeCartordernotes, without requiring CCPERMDELETE for orders. An authenticated...

CVE-2026-54644

CubeCart is an ecommerce software solution. Prior to 6.7.5, the errorMessage method in classes/gui.class.php uses striptags to permit anchor elements in error, information, and warning messages while retaining unsafe href values and onclick event handlers. Attacker-controlled search or input data...

CVE-2026-54648

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

CVE-2026-54645

CubeCart is an e-commerce platform where a stored XSS vulnerability exists in the product management panel prior to version 6.7.5. In admin/sources/products.index.inc.php (lines 55–59), the application bypasses its global sanitizer by reading description, description_short, and spec_copy fields d...

CVE-2026-54643

CubeCart prior to version 6.7.5 is affected by a missing authorization check in the delete-note handler (admin/sources/orders.index.inc.php). The handler verifies only the presence of order_id and delete-note parameters before deleting records from CubeCart_order_notes, without requiring the CC_P...

CVE-2026-54643 CubeCart: Missing Authorization Check for Order Note Deletion in orders.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, the delete-note handler in admin/sources/orders.index.inc.php verifies only the presence of orderid and delete-note parameters before deleting records from CubeCartordernotes, without requiring CCPERMDELETE for orders. An authenticated...

CVE-2026-54642

CubeCart (ecommerce software) versions prior to 6.7.5 contain a CSRF vulnerability in the admin panel. The reset_id (download-counter reset) and delete_card (stored payment-card deletion) actions in admin/sources/orders.index.inc.php use state-changing GET requests that are omitted from the CSRF ...

CVE-2026-54644 CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message System

CubeCart is an ecommerce software solution. Prior to 6.7.5, the errorMessage method in classes/gui.class.php uses striptags to permit anchor elements in error, information, and warning messages while retaining unsafe href values and onclick event handlers. Attacker-controlled search or input data...

CVE-2026-54644

CubeCart (ecommerce platform) prior to 6.7.5 is vulnerable to Cross-Site Scripting (XSS) via the _errorMessage method in classes/gui.class.php. The method uses strip_tags($message, ''), which permits anchor tags but retains unsafe href attributes and onclick event handlers. Attacker-controlled se...

CVE-2026-54647

CubeCart (ecommerce software) prior to 6.7.5 contains an SQL injection vulnerability in admin/sources/settings.index.inc.php (line 184). The administrator-controlled download_expire POST parameter is concatenated directly into a raw UPDATE statement on CubeCart_downloads without numeric validatio...

CVE-2026-54646

CubeCart (an ecommerce platform) is affected by a SQL identifier injection in admin/sources/maintenance.index.inc.php (line 551) prior to 6.7.5 . Administrator-supplied table names from POST parameters are wrapped in backticks and placed into structural SQL statements (ALTER TABLE, CHECK TABLE, A...

CVE-2026-54648 CubeCart: Missing Authorization Check in customers.gdpr.inc.php Leads to Unauthorized Customer Data Deletion

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

CVE-2026-54648

CubeCart (an ecommerce platform) is vulnerable to unauthorized customer data deletion in versions prior to 6.7.5 . The GDPR tools in admin/sources/customers.gdpr.inc.php rely only on page-level CC_PERM_READ access and fail to enforce CC_PERM_DELETE for the purge, no_order_purge, and delete_guests...

CubeCart 6.7.4 - Stored XSS

Exploit Title: CubeCart 6.7.4 - Stored Cross-Site Scripting Date: 2026-06-08 Exploit Author: Mikail Kocadağ MKLKCDG Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54645 Advisory / References:...

CubeCart 6.7.4 - SQL

Exploit Title: CubeCart 6.7.4 - SQL Bypass in maintenance.index.inc.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54646 Advisory / References...

CubeCart 6.7.4 - SQL injection

Exploit Title: CubeCart 6.7.4 - SQL injection Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54647 Advisory / References:...

CubeCart 6.7.4 - Cross-Site Scripting

Exploit Title: CubeCart 6.7.4 - Cross-Site Scripting Attribute Injection in gui.class.php Date: 2026-06-08 Exploit Author: Mikail Kocadağ MKLKCDG Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE:...