Lucene search
HistoryJun 10, 2010 - 12:30 a.m.
CVE-2010-1931
cve-2010-1931
sql injection
cubecart
php
shopping cart
remote attackers
nvd
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.2%
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.
References
Related
coresecurity
coresecurity
SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application
2010-06-08 00:00:00
securityvulns
securityvulns
seebug
seebug
CubeCart PHP (shipkey parameter) <= 4.3.x - Remote SQL Injection
2014-07-01 00:00:00
exploitpack
exploitpack
CubeCart PHP 4.3.x - shipkey SQL Injection
2010-06-29 00:00:00
prion
prion
Sql injection
2010-06-10 00:30:00
exploitdb
exploitdb
CubeCart PHP 4.3.x - 'shipkey' SQL Injection
2010-06-29 00:00:00
packetstorm
packetstorm
Core Security Technologies Advisory 2010.0415
2010-06-09 00:00:00
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.2%
Related for CVE-2010-1931