Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4525. PoCs published by GulfTech Security.
AI-analyzed exploit summary The writeup describes multiple vulnerabilities in CubeCart <= 3.0.12, including SQL injection via uninitialized arrays, XSS due to uninitialized arrays, and arbitrary file inclusion leading to potential RCE. Exploitation details and code snippets are provided for each vulnerability.
Description
Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array.
Exploits (1)
The writeup describes multiple vulnerabilities in CubeCart <= 3.0.12, including SQL injection via uninitialized arrays, XSS due to uninitialized arrays, and arbitrary file inclusion leading to potential RCE. Exploitation details and code snippets are provided for each vulnerability.