CVE-2006-0922
Published Feb 28, 2006
Last updated 6 years ago
Overview
- Description
- CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.0_alpha:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B08D050-1FD0-4688-8120-02522214D724"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.0_alpha-2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "967127A1-DAB9-4F44-91E4-BF813A633DC4"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.0_alpha-rgf:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89DDE433-82D9-4D12-B1B1-18355FCBA903"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.0_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7086BF6-F17A-4CE0-AAC3-B5B40F5D69B1"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.0_final:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA2995DC-5580-411F-8167-F543CCF7B0F4"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD035515-2C6D-4495-BA84-55C1D44C275A"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F93159B6-C47D-4AEE-B013-0F5FE3FF3CF0"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "715762F5-862C-489D-A75F-B1E78F2AC332"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DF3BCE9-897E-4951-AD9E-E3830A0776FA"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F570531-384B-43C6-9093-1441492335C5"
},
{
"criteria": "cpe:2.3:a:devellion:cubecart:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65F4B32C-3CC1-466F-92C4-7F763A6989FA"
}
],
"operator": "OR"
}
]
}
]