Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-2341 Details

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://forums.cubecart.com/topic/48427-cubecart-529-relased/	CVE
http://secunia.com/advisories/57856	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/92526	CVE
http://www.exploit-db.com/exploits/32830	CVE
http://www.osvdb.org/105784	CVE
http://www.securityfocus.com/bid/66805	CVE
http://www.securitytracker.com/id/1030086	CVE
http://forums.cubecart.com/topic/48427-cubecart-529-relased/	[email protected]
http://secunia.com/advisories/57856	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/92526	[email protected]
http://www.exploit-db.com/exploits/32830	[email protected]
http://www.osvdb.org/105784	[email protected]
http://www.securityfocus.com/bid/66805	[email protected]
http://www.securitytracker.com/id/1030086	[email protected]

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]

Product	Versions
cubecart cubecart	<= 5.2.8 5.2.0 5.2.1 5.2.2 5.2.3
CPE cpe:2.3:a:cubecart:cubecart:::::::: cpe:2.3:a:cubecart:cubecart:5.2.0:::::::* cpe:2.3:a:cubecart:cubecart:5.2.1:::::::* cpe:2.3:a:cubecart:cubecart:5.2.2:::::::* cpe:2.3:a:cubecart:cubecart:5.2.3:::::::* cpe:2.3:a:cubecart:cubecart:5.2.4:::::::* cpe:2.3:a:cubecart:cubecart:5.2.5:::::::* cpe:2.3:a:cubecart:cubecart:5.2.6:::::::* cpe:2.3:a:cubecart:cubecart:5.2.7:::::::* Remediation No remediation found in references.

Product

Versions

cubecart cubecart

<= 5.2.8

5.2.0

5.2.1

5.2.2

5.2.3

6 change records found show changes

QUICK INFO