Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
CubeCart Improper Input Validation Vulnerability - CVE-2013-1465 - Vulnerability Database
CubeCart

CubeCart Improper Input Validation Vulnerability - CVE-2013-1465

High
Reference: CVE-2013-1465
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-1465
Title: CubeCart Improper Input Validation Vulnerability
Overview:

The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter as demonstrated by modifying the application configuration using the Config object.