vendor:
CubeCart
by:
Bogdan Calin
9
CVSS
CRITICAL
Session Management Bypass
N/A
CWE
Product Name: CubeCart
Affected Version From: v4.3.4
Affected Version To: v4.3.4
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
CubeCart 4 Session Management Bypass
While auditing the source code of CubeCart version v4.3.4, I've found a critical vulnerability in this application. Basically, session managament for administrative users is flawed. It's easy to bypass it without providing any credentials. An attacker can later perform any actions the administrator can, such as dumping the database, install modules (PHP code execution) and so on.
Mitigation:
The vendor has released an updated version (v4.3.5) which fixes this vulnerability.
