EUVD-2009-4031

Malware in sbrugna...

CVE-2023-47675

CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command...

CVE-2018-20716

CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...

CVE-2005-0443

index.php in CubeCart 2.0.4 allows remote attackers to 1 obtain the full path for the web server or 2 conduct cross-site scripting XSS attacks via an invalid language parameter, which echoes the parameter in a PHP error message...