devellion cubecart 3.0.7-pl1 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote malicious users to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php. Note: vectors (1) a...

Devellion Cubecart 3.0.3 Devellion Cubecart 3.0.7-pl1

2 EDB exploits

Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) oid parameter in modules/gateway/Protx/confirmed.php and the (2) x_invoice_num parameter in modules/gateway/Authorize/confirm...

Devellion Cubecart 3.0.7-pl1 Devellion Cubecart 3.0.6 Devellion Cubecart 3.0.7 Devellion Cubecart 3.0.3 Devellion Cubecart 3.0.4 Devellion Cubecart 3.0.11

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) file, (2) x, and (3) y parameters in (a) admin/filemanager/preview.php; and the (4) email parameter in (b) ...

Devellion Cubecart 3.0.7-pl1 Devellion Cubecart 3.0.6 Devellion Cubecart 3.0.7 Devellion Cubecart 3.0.11 Devellion Cubecart 3.0.3 Devellion Cubecart 3.0.4

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote malicious users to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) catId parameters in index.php; and the (8) username field in a login action ...

Devellion Cubecart 3.0.7-pl1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook