CVE-2010-1931: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php...

Core Security Technologies Advisory 2010.0415

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart...

SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application

Advisory ID Internal CORE-2010-0415 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application Advisory Id: CORE-2010-0415 Advisory URL:https://www.coresecurity.com/core-labs/advisories/cubecart-php-shopping-cart-sql-injection Date published:...

CubeCart (index.php) SQL Injection Vulnerability

No description provided by source. CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart SQL Injection

CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:. Dork : "powered by CubeCart"...

CubeCart (index.php) Sql Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ CubeCart index.php Sql Injection Vulnerability ================================================ .:. Author : AtT4CKxT3rR0r1ST .:. Script : http://www.cubecart.com/downloads/ .:. Dork :...

CubeCart - index.php SQL Injection

CubeCart - index.php SQL Injection CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - 'index.php' SQL Injection

CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:. Dork : "powered by CubeCart"...

Sql injection

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter...

CVE-2009-4060

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter...

CVE-2009-4060

CubeCart is affected by an SQL injection in includes/content/viewProd.inc.php via the productId parameter, affecting versions before 4.3.7. The root cause is insufficient sanitization of user input, allowing remote attackers to execute arbitrary SQL commands. Affected: CubeCart prior to 4.3.7. Im...

CVE-2009-4060

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter...

CubeCart 'productId' SQL Injection Vulnerability

CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

CubeCart 'productId' SQL Injection Vulnerability

CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2009-4060: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter...

CubeCart includes/content/viewProd.inc.php productId Parameter SQL Injection

The version of CubeCart running on the remote host has a SQL injection vulnerability. Input to the 'productId' parameter of is not properly sanitized in 'includes/content/viewProd.inc.php' before it is used in database queries. Regardless of PHP's 'magicquotesgpc' setting, a remote attacker could...

CubeCart 3.0.44.3.6 - ProductID SQL Injection

CubeCart 3.0.44.3.6 - ProductID SQL Injection source: https://www.securityfocus.com/bid/37065/info CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CubeCart 3.0.4/4.3.6 - 'ProductID' SQL Injection

source: https://www.securityfocus.com/bid/37065/info CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

CVE-2009-3904

classes/session/ccadminsession.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty 1 sessID ccAdmin cookie, 2 XCLUSTERCLIENTIP header, or 3...

Design/Logic Flaw

classes/session/ccadminsession.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty 1 sessID ccAdmin cookie, 2 XCLUSTERCLIENTIP header, or 3...