Lucene search

PRIOn knowledge basePRION:CVE-2009-4060

HistoryNov 24, 2009 - 2:30 a.m.

Sql injection

2009-11-2402:30:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.5%

JSON

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.

CPENameOperatorVersion
cubecarteq4.0.1
cubecarteq4.0.0 beta-2
cubecarteq3.0.9
cubecarteq3.0.8
cubecarteq3.0.18
cubecarteq3.0.5
cubecarteq4.3.4
cubecarteq4.0.0
cubecarteq3.0.14
cubecarteq3.0.13

Name	Operator	Version
cubecart	eq	4.0.1
cubecart	eq	4.0.0 beta-2
cubecart	eq	3.0.9
cubecart	eq	3.0.8
cubecart	eq	3.0.18
cubecart	eq	3.0.5
cubecart	eq	4.3.4
cubecart	eq	4.0.0
cubecart	eq	3.0.14
cubecart	eq	3.0.13

Rows per page:

1-10 of 431

References

forums.cubecart.com/index.php?showtopic=39900

osvdb.org/60306

secunia.com/advisories/37402

www.securityfocus.com/bid/37065

www.vupen.com/english/advisories/2009/3290

exchange.xforce.ibmcloud.com/vulnerabilities/54331

9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.5%

JSON

Related for PRION:CVE-2009-4060