CVE-2015-6928

概要

参考情報

• packetstormsecurity.com/files/133535/CubeCart-6.0.6-Administrative-Bypass.html · Exploit
• seclists.org/fulldisclosure/2015/Sep/40 · Exploit
• securitytracker.com/id/1034015
• forums.cubecart.com/topic/50277-critical-security-issue-admin-account-hijack · Patch

cubecart のその他の脆弱性

• CVE-2026-35496中 5.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-l…
• CVE-2026-34018緊急 9.8An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the p…
• CVE-2026-21719高 8.6An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute …
• CVE-2025-59413中 6.5CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows…
• CVE-2025-59412中 5.4CubeCart is an ecommerce software solution. Prior to version 6.5.11, a vulnerability exists in the product reviews feature where user-suppli…