Family: CGI abuses --> Category: infos
Brooky CubeCart < 2.0.5 Vulnerability Scan
Vulnerability Scan Summary
Checks Brooky CubeCart language XSS
Detailed Explanation for this Vulnerability Test
The remote web server contains a PHP script that is prone to multiple
The version of CubeCart on the remote host is vulnerable to a local
file include issue, along with related cross-site scripting and path
disclosure issues, due to a failure to sanitize user-supplied data.
Successful exploitation of this issue may allow a possible hacker to execute
arbitrary code on the remote host, to read arbitrary files from it, to
inject arbitrary HTML or script code through the affected application
and into a user's browser, or to learn the full installation path of
See also :
Upgrade to Cubecart version 2.0.5 or higher.
Medium / CVSS Base Score : 6
Click HERE for more information and discussions on this network vulnerability scan.