medium6.5
CVE-2017-2098
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
Impact
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cubecart | Cubecart | through 6.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN81618356/index.html
- http://www.securityfocus.com/bid/95866
- https://forums.cubecart.com/topic/52088-cubecart-614-released/
- http://jvn.jp/en/jp/JVN81618356/index.html
- http://www.securityfocus.com/bid/95866
- https://forums.cubecart.com/topic/52088-cubecart-614-released/