2 matches found
Sql injection
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php...
7.5CVSS9AI score0.01257EPSS
SaveExploits6References7Affected Software1
CVE-2010-1931: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php...
7.5CVSS6.4AI score0.01257EPSS
SaveExploits6References2
20