CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1931)

Description

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.

Remediation

References

CVE-2010-1931

Related Vulnerabilities

WordPress Plugin WP Database Backup Cross-Site Request Forgery (5.1.2)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2750)

MySQL CVE-2020-2761 Vulnerability (CVE-2020-2761)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.17)

Liferay DXP CVE-2022-42126 Vulnerability (CVE-2022-42126)

Severity

High

Classification

CVE-2010-1931 CWE-138