NVD

Id
37658  
Name
CVE-2013-1465  
Description
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-02-08  
Modified Date
2013-03-26  
Seq
2013-1465  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191538 37658 CVE-2013-1465 20130206 [KIS-2013-02] CubeCart <= 5.2.0 (cubecart.class.php) PHP Object Injection Vulnerability  View
191539 37658 CVE-2013-1465 http://forums.cubecart.com/?showtopic=47026  View
191540 37658 CVE-2013-1465 http://karmainsecurity.com/KIS-2013-02  View
191541 37658 CVE-2013-1465 http://packetstormsecurity.com/files/120094/CubeCart-5.2.0-PHP-Object-Injection.html  View
191542 37658 CVE-2013-1465 24465  View
191543 37658 CVE-2013-1465 57770  View
191544 37658 CVE-2013-1465 cubecart-shipping-unauth-access(81920)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19893 JVNDB-2013-001468 CubeCart における任意の PHP オブジェクトをアンシリアライズされる脆弱性 CubeCart の classes/cubecart.class.php 内の Cubecart::_basket メソッドには、任意の PHP オブジェクトをアンシリアライズされる脆弱性が存在します。 CVE-2013-1465 61407 CVE-2013-1465 37658 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001468.html 2013-01-31 2013-02-13 View