Cubecart Limited

9 CVEs across 1 Cubecart Limited products. Browse Cubecart Limited vulnerabilities, severities, and proof-of-concept exploits.

Cubecart Limited products with known CVEs

ProductCVEs
Cubecart9
Cubecart Limited CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-35496Low2.72026-04-17A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories th…
CVE-2026-34018Critical9.82026-04-17An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product.
CVE-2026-21719High7.22026-04-17An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS com…
CVE-2023-47675High7.22023-11-17CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
CVE-2023-47283Medium4.92023-11-17Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the sys…
CVE-2023-42428Medium6.52023-11-17Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and…
CVE-2023-38130High8.12023-11-17Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system.
CVE-2017-2117Medium4.92017-04-28Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.
CVE-2017-2098Medium6.52017-04-28Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.