CVE-2013-1465
CRITICALCubeCart 5.0.0-5.2.0 - Remote Code Execution via Unserialization in Shipping Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-1465. PoCs published by EgiX.
AI-analyzed exploit summary The writeup describes a PHP object injection vulnerability in CubeCart <= 5.2.0, where user input passed through the $_POST['shipping'] parameter is not properly sanitized before being used in an unserialize() call. This can be exploited to inject arbitrary objects, potentially leading to configuration manipulation and further attacks.
Description
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object.
Exploits (1)
The writeup describes a PHP object injection vulnerability in CubeCart <= 5.2.0, where user input passed through the $_POST['shipping'] parameter is not properly sanitized before being used in an unserialize() call. This can be exploited to inject arbitrary objects, potentially leading to configuration manipulation and further attacks.
References (9)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H