Cubecart
18 known vulnerabilities
Top Products
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privileg
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQ
An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative p
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbi
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbi
Frequently Asked Questions
How many CVEs affect Cubecart?
Cubecart has 18 CVE records in our database, including 3 critical and 1 high severity vulnerabilities.
What are the most severe Cubecart vulnerabilities?
Cubecart has 3 critical severity (CVSS 9.0+) and 1 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Cubecart vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Cubecart products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Cubecart Vulnerabilities
CyberStrike scans your infrastructure for Cubecart vulnerabilities and provides real-time remediation guidance.
Get Started