CVE-2009-3904
CubeCart 4.3.4 - Unauthenticated Administrative Access Bypass via Empty Session ID or Headers
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-3904. PoCs published by Bogdan Calin.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass in CubeCart 4.3.4 by manipulating session management. It leverages empty session IDs, user agents, and X_CLUSTER_CLIENT_IP headers to gain administrative access and perform actions like database dumps.
Description
classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header.
Exploits (1)
This exploit demonstrates an authentication bypass in CubeCart 4.3.4 by manipulating session management. It leverages empty session IDs, user agents, and X_CLUSTER_CLIENT_IP headers to gain administrative access and perform actions like database dumps.