CVE-2014-2341: Cubecart

Medium severity, CVSS 6.8. EPSS: 5.8% chance of exploitation in the next 30 days.

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Affected products

• Cubecart Cubecart: up to and including 5.2.8; version 5.2.0 only; version 5.2.1 only; version 5.2.2 only; version 5.2.3 only; version 5.2.4 only; …

Published 2014-04-22. Last modified 2026-06-17.