Description

Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.

Remediation

References

CVE-2017-2098

Related Vulnerabilities

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-40407)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0018)

WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.8.4)

WordPress Plugin Social Sharing-Social Warfare Multiple Vulnerabilities (3.5.2)

WordPress Plugin WP Accessibility Cross-Site Scripting (1.6.10)

Severity

Medium

Classification

CVE-2017-2098 CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities