Description
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CubeCart | CubeCart | versions prior to 6.1.5 | — |
References
- 96466 vdb-entry
- https://forums.cubecart.com/topic/52188-cubecart-615-released/
- JVN#63474730 third-party-advisory