Description
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP BaiDu Submit Cross-Site Scripting (1.2.1)
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.19)
WordPress Plugin WordPress Books Gallery Unspecified Vulnerability (4.4.1)
WordPress Plugin BigDoor Quick Gamification for WordPress Cross-Site Scripting (1.0.5)
WordPress Plugin Content Staging Cross-Site Scripting (2.0.1)