CVE-2006-4526

SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray parameter...

CVE-2006-4526

CVE-2006-4526 affects CubeCart 3.0.12 and earlier. The SQL injection flaw occurs in includes/content/viewCat.inc.php when register_globals is enabled, allowing remote attackers to execute arbitrary SQL commands via the searchArray[] parameter. The vulnerability is documented across multiple sourc...