NetSight
IP …
medium5.0Public exploit code

CVE-2006-0922

CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an abs…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php.

Affected products

VendorProductAffected versions
DevellionCubecart
Versions 3.0.0_alpha, 3.0.0_alpha-2, 3.0.0_alpha-rgf, 3.0.0_beta, 3.0.0_final, 3.0.1

References