739 matches found
CVE-2006-4525
Cross-site scripting XSS vulnerability in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array...
CVE-2006-4526
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray parameter...
📄 Cubecart 6.5.9 Cross Site Scripting
Cubecart version 6.5.9 suffers from a persistent cross site scripting vulnerability. Exploit Title: Stored XSS in "Description" Functionality - cubecartv6.5.9 Date: 05/2025 Exploit Author: Andrey Stoykov Version: 6.5.9 Tested on: Debian 12 Blog: https://msecureltd.blogspot.com/ Stored XSS 1: Step...
CVE-2024-34832
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters...
CVE-2024-34832
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters...
CVE-2024-34832
CVE-2024-34832 is a directory traversal vulnerability in CubeCart v6.5.5 and earlier that enables arbitrary code execution via crafted uploads to the _g and node parameters. Multiple sources describe the flaw: the admin panel can be abused to include .inc.php files located anywhere on the server,...
CVE-2024-34832
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters...
CVE-2024-34832
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters...
Devellion CubeCart Security Breach
Devellion CubeCart is a free and open source e-commerce shopping cart software from the company of Devellion UK. The software supports selling products, adding/editing products or images in an online store, etc. A security vulnerability exists in Devellion CubeCart v.6.5.5 and earlier versions,...
CVE-2024-34832: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters...
PT-2024-26229 · Cubecart · Cubecart
Name of the Vulnerable Software and Affected Versions: CubeCart versions 6.5.5 and earlier Description: The issue allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters. This enables the attacker to potentially access and manipulate sensitive data or...
CVE-2024-33438
File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file...
CVE-2024-33438: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file...
CVE-2024-33438
File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file...
CVE-2024-33438
CubeCart versions prior to 6.5.5 are vulnerable to an arbitrary file upload vulnerability within the application's file manager . The flaw exists because the system fails to properly filter dangerous file types, allowing an authenticated user to upload a crafted .phar file. Successful exploitatio...
Devellion CubeCart 安全漏洞
Devellion CubeCart is a free and open source e-commerce shopping cart software from the company of Devellion UK. The software supports selling products, adding/editing products or images, etc. in an online store. A security vulnerability exists in Devellion CubeCart versions prior to 6.5.5, which...
PT-2024-25259 · Cubecart · Cubecart
Name of the Vulnerable Software and Affected Versions: CubeCart versions prior to 6.5.5 Description: The issue allows an authenticated user to execute arbitrary code via a crafted .phar file. This is a result of a File Upload vulnerability. Recommendations: For versions prior to 6.5.5, update to...
CVE-2024-33438
File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file...
