EUVD-2010-4867

Malware in sbrugna...

CVE-2010-4903

CVE-2010-4903 : CubeCart 4.3.3 contains a vulnerability in index.php where the searchStr parameter enables an SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low complexity, no authentication...

CubeCart 4.3.3 SQL Injection / Cross Site Scripting

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a number of security problems discovered by Acunetix WVS in CubeCart. "CubeCart is a fully...