Description

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.

Remediation

References

CVE-2010-1931

Related Vulnerabilities

WordPress Plugin iframe Cross-Site Scripting (4.4)

Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2025-49826)

WordPress Plugin MediaElement.js-HTML5 Video & Audio Player Cross-Site Scripting (4.2.8)

WordPress Plugin BackWPup Remote and Local Code Execution (1.6.1)

WordPress Plugin Invoicing with InvoiceXpress for WooCommerce-Free Cross-Site Scripting (3.0.2)

Severity

High

Classification

CVE-2010-1931 CWE-138

Tags

Missing Update Known Vulnerabilities