← back
CVE-2009-3904

CVE-2009-3904

EPSS 8.7%
classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/9875unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://forums.cubecart.com/index.php?showtopic=39691?read=1http://forums.cubecart.com/index.php?showtopic=39748http://secunia.com/advisories/37197https://exchange.xforce.ibmcloud.com/vulnerabilities/54062http://www.acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/http://www.securityfocus.com/archive/1/507594/100/0/threadedhttp://www.securityfocus.com/bid/36882http://www.securitytracker.com/id?1023120http://www.vupen.com/english/advisories/2009/3113