Lucene search
+L

6 matches found

NVD
NVD
added 2026/09/17 10:17 p.m.7 views

CVE-2026-54647

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled downloadexpire POST parameter into a raw UPDATE statement for CubeCartdownloads without numeric validation. An authenticated administrator can supply...

7.2CVSS0.01447EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2026/09/17 10:02 p.m.30 views

CVE-2026-54647 CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled downloadexpire POST parameter into a raw UPDATE statement for CubeCartdownloads without numeric validation. An authenticated administrator can supply...

7.2CVSS0.01447EPSS
SaveExploits2References4
CVE
CVE
added 2026/09/17 10:02 p.m.11 views

CVE-2026-54647

CubeCart (ecommerce software) prior to 6.7.5 contains an SQL injection vulnerability in admin/sources/settings.index.inc.php (line 184). The administrator-controlled download_expire POST parameter is concatenated directly into a raw UPDATE statement on CubeCart_downloads without numeric validatio...

7.2CVSS5.7AI score0.01447EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/09/17 10:02 p.m.11 views

EUVD-2026-82528

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled downloadexpire POST parameter into a raw UPDATE statement for CubeCartdownloads without numeric validation. An authenticated administrator can supply...

7.2CVSS5.7AI score0.01447EPSS
SaveExploits2References4
OSV
OSV
added 2026/09/17 10:02 p.m.6 views

CVE-2026-54647 CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled downloadexpire POST parameter into a raw UPDATE statement for CubeCartdownloads without numeric validation. An authenticated administrator can supply...

7.2CVSS5.8AI score
SaveExploits0References6
Exploit DB
Exploit DB
added 2026/08/31 12:00 a.m.23 views

CubeCart 6.7.4 - SQL injection

Exploit Title: CubeCart 6.7.4 - SQL injection Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54647 Advisory / References:...

7.2CVSS5.9AI score0.01447EPSS
SaveExploits2
Rows per page
Query Builder