Description
SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.
Remediation
References
Related Vulnerabilities
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43952)
MySQL CVE-2019-2529 Vulnerability (CVE-2019-2529)
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (2.0.5)
Django Improper Access Control Vulnerability (CVE-2016-2048)
Moodle Improper Input Validation Vulnerability (CVE-2012-0795)