Total vulnerabilities in the database
classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the administrator email in the email parameter.
| Software | From | Fixed in |
|---|---|---|
| cubecart / cubecart | 5.2.13 | 5.2.13.x |
| cubecart / cubecart | 5.2.12 | 5.2.12.x |
| cubecart / cubecart | 6.0.2 | 6.0.2.x |
| cubecart / cubecart | 6.0.4 | 6.0.4.x |
| cubecart / cubecart | 5.2.15 | 5.2.15.x |
| cubecart / cubecart | 6.0.6 | 6.0.6.x |
| cubecart / cubecart | 6.0.5 | 6.0.5.x |
| cubecart / cubecart | 5.2.14 | 5.2.14.x |
| cubecart / cubecart | 6.0.3 | 6.0.3.x |
| cubecart / cubecart | 6.0.1 | 6.0.1.x |
| cubecart / cubecart | 6.0.0 | 6.0.0.x |