medium4.9
CVE-2017-2117
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.
Impact
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cubecart | Cubecart | through 6.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN63474730/index.html
- http://www.securityfocus.com/bid/96466
- https://forums.cubecart.com/topic/52188-cubecart-615-released/
- http://jvn.jp/en/jp/JVN63474730/index.html
- http://www.securityfocus.com/bid/96466
- https://forums.cubecart.com/topic/52188-cubecart-615-released/