Title: Brooky CubeCart Multiple Vulnerabilities
Severity: MODERATE
Description:
Brooky CubeCart is an online storefront application written in PHP. It utilizes a MySQL database for data storage.
Brooky CubeCart is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow remote attackers to disclose arbitrary files and carry out cross-site scripting attacks.
The following specific issues were identified:
The application is reportedly susceptible to a remote directory traversal vulnerability. This issue is reported to affect the 'language' parameter of the 'index.php' script.
A malicious user could issue a request containing directory traversal strings such as '../' to possibly view files outside the server root directory in the context of the server. Information gathered through this attack could be used to mount further attacks against a vulnerable computer. Furthermore, this issue may be leveraged to include and execute PHP scripts that are local to the affected computer, potentially facilitating some level of compromise depending on the state of the computer.
The application is also prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.
The problem presents itself when malicious HTML and script code is sent to the application through 'index.php' script including the 'language' parameter.
This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected Web site and may allow for theft of cookie-based authentication credentials or other attacks.
CubeCart 2.0.4 and prior versions are considered to be vulnerable to these issues.
Affected Products:
- Brooky CubeCart 2.0.1
- Brooky CubeCart 2.0.4
References:
- Brooky: CubeCart Home Page
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
