CVE-2010-1931

Опубликовано: 10 июн. 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.

Ссылки

http://forums.cubecart.com/index.php?showtopic=41469
Patch
Vendor Advisory
http://osvdb.org/65250
Exploit
http://secunia.com/advisories/40102
Vendor Advisory
http://www.coresecurity.com/content/cubecart-php-shopping-cart-sql-injection
Exploit
http://www.securityfocus.com/archive/1/511735/100/0/threaded
http://www.securityfocus.com/bid/40641
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/59245
http://forums.cubecart.com/index.php?showtopic=41469
Patch
Vendor Advisory
http://osvdb.org/65250
Exploit
http://secunia.com/advisories/40102
Vendor Advisory
http://www.coresecurity.com/content/cubecart-php-shopping-cart-sql-injection
Exploit
http://www.securityfocus.com/archive/1/511735/100/0/threaded
http://www.securityfocus.com/bid/40641
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/59245

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cubecart:cubecart:4.3.4:*:*:*:*:*:*:*

cpe:2.3:a:cubecart:cubecart:4.3.5:*:*:*:*:*:*:*

cpe:2.3:a:cubecart:cubecart:4.3.6:*:*:*:*:*:*:*

cpe:2.3:a:cubecart:cubecart:4.3.7:*:*:*:*:*:*:*

cpe:2.3:a:cubecart:cubecart:4.3.8:*:*:*:*:*:*:*

cpe:2.3:a:cubecart:cubecart:4.3.9:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01422

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-cx6m-9875-mvh9

github

больше 3 лет назад