CVE-2024-33438

Summary of CVE-2024-33438 : CubeCart versions prior to 6.5.5 are vulnerable to an authenticated file upload flaw that allows arbitrary code execution via a crafted .phar file. The underlying issue is a file upload vulnerability in the application’s handling of uploaded files, enabling an attacker...