3 matches found
PT-2022-15899
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description An attacker can access the "Forgot my password" button to verify which users are in the system and which are not. By entering a valid user, the system...
5.5CVSS0.00441EPSS
SaveExploits0References5
CVE-2018-20716
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
9.8CVSS0.01177EPSS
SaveExploits1References1
CVE-2018-20716: Improper Neutralization of Special Elements used in an SQL Command
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
9.8CVSS5.8AI score0.01177EPSS
SaveExploits1References2
20