482Third-party advisory
http://securityreason.com/securityalert/482 CVE-2006-0922
CubeCart 3.0.x - Arbitrary File Upload
Record summary
CVE-2006-0922 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCubeCart 3.0.x - Arbitrary File UploadExploitDB exploitby NSA GroupNot analyzed1 file
References
11cubecart.comConfirmation
http://www.cubecart.com/site/forums/index.php?showtopic=14704 cubecart.com
http://www.cubecart.com/site/forums/index.php?showtopic=14817 cubecart.com
http://www.cubecart.com/site/forums/index.php?showtopic=14825 cubecart.com
http://www.cubecart.com/site/forums/index.php?showtopic=14960 cubecart.com
http://www.cubecart.com/site/forums/index.php?showtopic=14972 nsag.ru
http://www.nsag.ru/vuln/892.html 20060223 NSA Group Security Advisory NSAG-¹197-23.02.2006 Vulnerability CubeCart 3.0.0 ? 3.0.6mailing list
http://www.securityfocus.com/archive/1/425931/100/0/threaded 16796vdb entry
http://www.securityfocus.com/bid/16796 cubecart-connector-file-include(24883)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/24883 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-0922