Description

A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible.

Remediation

References

CVE-2026-35496

Related Vulnerabilities

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Arbitrary File Upload (2.2.4)

WordPress Plugin Attachment Manager Arbitrary File Upload (2.1.1)

Plone CMS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2024-0669)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3094)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.4)

Severity

Low

Classification

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-22 CVE-2026-35496