critical9.8
CVE-2024-34832
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node pa…
Impact
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cubecart | Cubecart | before 6.5.5 |