Description
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
Remediation
References
Related Vulnerabilities
WordPress Plugin PDF & Print Button Joliprint Multiple Cross-Site Scripting Vulnerabilities (1.3.0)
Python Other Vulnerability (CVE-2010-3492)
Oracle Database Server CVE-2008-1818 Vulnerability (CVE-2008-1818)
CubeCart Session Fixation Vulnerability (CVE-2021-33394)
WordPress Plugin Basic Google Maps Placemarks Cross-Site Scripting (1.10.2)