CVE-2014-2341

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

5.83% chance of exploitation in the next 30 days, 93th percentile

Published

2014-04-21

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/32830

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32830

References

• CVE Record
• NVD entry

Related

• CVE-2014-2340
• CVE-2014-2347
• CVE-2014-2339
• CVE-2014-2364
• CVE-2014-2326
• CVE-2014-2383