« Volver al listado

CVE-2015-6928

Estado: ModificadaMedia (6.8)—

classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the administrator email in the email parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cubecart — Cubecart

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6928",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-09-28T15:59:01.627",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/133535/CubeCart-6.0.6-Administrative-Bypass.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2015/Sep/40",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1034015",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://forums.cubecart.com/topic/50277-critical-security-issue-admin-account-hijack/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/133535/CubeCart-6.0.6-Administrative-Bypass.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2015/Sep/40",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034015",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://forums.cubecart.com/topic/50277-critical-security-issue-admin-account-hijack/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the administrator email in the email parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en classes/admin.class.php en CubeCart 5.2.12 hasta la versión 5.2.16 y 6.x en versiones anteriores a 6.0.7, no valida adecuadamente que una petición de reinicio de contraseña fuese realizada, lo que permite a atacantes remotos cambiar la contraseña del administrador a través de una petición de recuperación con un carácter espacio en el parámetro validate y el email del administrador en el parámetro email."
    }
  ],
  "lastModified": "2026-06-17T00:31:37.190",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:5.2.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92715FDD-3B78-4EF6-87C3-6562853630D8"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:5.2.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "721E8C21-47B8-4B21-A944-07439BAFED84"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:5.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED7B3B53-353D-4FE4-BE1A-0358C2BA0465"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:5.2.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99FA6A94-6657-4AF1-8651-E09D8FD5CA48"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54A2767D-0233-4382-89D6-694678FDC0A1"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F3A2549-E556-4405-9F72-0696C6A04B95"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB6F2DD9-F9AC-4B9C-A3F4-1DD71DF1082C"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DCA4695-9537-4280-9774-230477B13513"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0B9CDFD-89B0-46A7-A6A6-ED5D8530C706"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B10B260-D3B2-4240-B421-A929DFA68124"
            },
            {
              "criteria": "cpe:2.3:a:cubecart:cubecart:6.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EB8E4A2-0C68-4B68-81AD-BD480EF3152E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}