Main Vulnerability Database Exploits ID:3990 - Exploit for Improper Authentication in CubeCart - CVE-2014-2341

ID:3990 - Exploit for Improper Authentication in CubeCart - CVE-2014-2341

Published: August 11, 2020

Vulnerability identifier: #VU41777

Vulnerability risk: Medium

CVE-ID: CVE-2014-2341

CWE-ID: CWE-287

Exploitation vector: Remote access

Vulnerable software:
CubeCart

Link to public exploit:

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Install update from vendor's website.