Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cubecart cubecart vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-4060
SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart prior to 4.3.7 remote malicious users to execute arbitrary SQL commands via the productId parameter.
Cubecart Cubecart 3.0.5Cubecart Cubecart 3.0.6Cubecart Cubecart 3.0.13Cubecart Cubecart 3.0.14Cubecart Cubecart 4.0.0Cubecart Cubecart 4.1.1Cubecart Cubecart 4.2.1Cubecart Cubecart 4.3.5Cubecart CubecartCubecart Cubecart 3.0.7Cubecart Cubecart 3.0.8Cubecart Cubecart 3.0.15Cubecart Cubecart 3.0.16Cubecart Cubecart 4.0.1Cubecart Cubecart 4.0.2Cubecart Cubecart 4.2.2Cubecart Cubecart 4.2.3Cubecart Cubecart 4.3.4Cubecart Cubecart 3.0.20Cubecart Cubecart 3.0.0Cubecart Cubecart 3.0.4Cubecart Cubecart 3.0.11
NA
CVE-2012-0865
Multiple open redirect vulnerabilities in CubeCart 3.0.20 and previous versions allow remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.
Cubecart CubecartCubecart Cubecart 3.0.13Cubecart Cubecart 3.0.12Cubecart Cubecart 3.0.15Cubecart Cubecart 3.0.14Cubecart Cubecart 3.0.7Cubecart Cubecart 3.0.6Cubecart Cubecart 3.0.19Cubecart Cubecart 3.0.18Cubecart Cubecart 3.0.11Cubecart Cubecart 3.0.10Cubecart Cubecart 3.0.2Cubecart Cubecart 3.0.1Cubecart Cubecart 3.0.5Cubecart Cubecart 3.0.4Cubecart Cubecart 3.0.3Cubecart Cubecart 3.0.17Cubecart Cubecart 3.0.16Cubecart Cubecart 3.0.9Cubecart Cubecart 3.0.8Cubecart Cubecart 3.0.0
NA
CVE-2015-6928
classes/admin.class.php in CubeCart 5.2.12 up to and including 5.2.16 and 6.x prior to 6.0.7 does not properly validate that a password reset request was made, which allows remote malicious users to change the administrator password via a recovery request with a space character i...
Cubecart Cubecart 5.2.12Cubecart Cubecart 6.0.3Cubecart Cubecart 6.0.4Cubecart Cubecart 5.2.15Cubecart Cubecart 6.0.0Cubecart Cubecart 5.2.13Cubecart Cubecart 5.2.14Cubecart Cubecart 6.0.5Cubecart Cubecart 6.0.6Cubecart Cubecart 6.0.1Cubecart Cubecart 6.0.2
NA
CVE-2014-2341
Session fixation vulnerability in CubeCart prior to 5.2.9 allows remote malicious users to hijack web sessions via the PHPSESSID parameter.
Cubecart Cubecart 5.2.7Cubecart Cubecart 5.2.3Cubecart Cubecart 5.2.2Cubecart Cubecart 5.2.5Cubecart Cubecart 5.2.4Cubecart Cubecart 5.2.6Cubecart CubecartCubecart Cubecart 5.2.1Cubecart Cubecart 5.2.0
NA
CVE-2010-1931
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 up to and including 4.3.9 allows remote malicious users to execute arbitrary SQL commands via the shipKey parameter to index.php.
Cubecart Cubecart 4.3.4Cubecart Cubecart 4.3.5Cubecart Cubecart 4.3.6Cubecart Cubecart 4.3.9Cubecart Cubecart 4.3.7Cubecart Cubecart 4.3.8
NA
CVE-2006-0922
CubeCart 3.0 up to and including 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote malicio...
Devellion Cubecart 3.0.0 FinalDevellion Cubecart 3.0.1Devellion Cubecart 3.0.0 Alpha-rgfDevellion Cubecart 3.0.0 BetaDevellion Cubecart 3.0.6Devellion Cubecart 3.0.2Devellion Cubecart 3.0.3Devellion Cubecart 3.0.0 AlphaDevellion Cubecart 3.0.0 Alpha-2Devellion Cubecart 3.0.4Devellion Cubecart 3.0.5
NA
CVE-2006-5109
Devellion CubeCart 2.0.x allows remote malicious users to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale...
Devellion Cubecart 2.0.5Devellion Cubecart 2.0.6Devellion Cubecart 2.0.3Devellion Cubecart 2.0.4Devellion Cubecart 2.0.0Devellion Cubecart 2.0.1Devellion Cubecart 2.0.2
NA
CVE-2006-5107
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote malicious users to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc parameter in view_doc.php, an...
Devellion Cubecart 2.0.4Devellion Cubecart 2.0.5Devellion Cubecart 2.0.2Devellion Cubecart 2.0.3Devellion Cubecart 2.0.6Devellion Cubecart 2.0.0Devellion Cubecart 2.0.1
NA
CVE-2006-5108
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote malicious users to inject arbitrary web script or HTML via the order_id parameter in (1) admin/print_order.php and (2) view_order.php; the (3) site_url and (4) la_search_home parameters a...
Devellion Cubecart 2.0.5Devellion Cubecart 2.0.6Devellion Cubecart 2.0.2Devellion Cubecart 2.0.3Devellion Cubecart 2.0.4Devellion Cubecart 2.0.0Devellion Cubecart 2.0.1
NA
CVE-2006-4267
Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) oid parameter in modules/gateway/Protx/confirmed.php and the (2) x_invoice_num parameter in modules/gateway/Authorize/confirm...
Devellion Cubecart 3.0.7-pl1Devellion Cubecart 3.0.6Devellion Cubecart 3.0.7Devellion Cubecart 3.0.3Devellion Cubecart 3.0.4Devellion Cubecart 3.0.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook