CVE-2009-3904

概要

参考情報

• forums.cubecart.com/index.php
• forums.cubecart.com/index.php · Patch
• secunia.com/advisories/37197 · Vendor Advisory
• acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access · Exploit
• securityfocus.com/archive/1/507594/100/0/threaded
• securityfocus.com/bid/36882 · Exploit
• securitytracker.com/id · Exploit
• vupen.com/english/advisories/2009/3113 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/54062

cubecart のその他の脆弱性

• CVE-2026-35496中 5.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-l…
• CVE-2026-34018緊急 9.8An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the p…
• CVE-2026-21719高 8.6An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute …
• CVE-2025-59413中 6.5CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows…
• CVE-2025-59412中 5.4CubeCart is an ecommerce software solution. Prior to version 6.5.11, a vulnerability exists in the product reviews feature where user-suppli…