CL
Vendor
CubeCart Limited
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-35496 | CU CubeCart CubeCart Limited | 2.7 | Apr 17 | A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be… |
| CVE-2026-34018 | CU CubeCart CubeCart Limited | 9.8 | Apr 17 | An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product |
| CVE-2026-21719 | CU CubeCart CubeCart Limited | 7.2 | Apr 17 | An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command |
| CVE-2023-47675 | CU CubeCart CubeCart Limited | 7.2 | Nov 17 | CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command |
| CVE-2023-47283 | CU CubeCart CubeCart Limited | 4.9 | Nov 17 | Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system |
| CVE-2023-42428 | CU CubeCart CubeCart Limited | 6.5 | Nov 17 | Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system |
| CVE-2023-38130 | CU CubeCart CubeCart Limited | 8.1 | Nov 17 | Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system |
| CVE-2017-2098 | CU CubeCart CubeCart Limited | 6.5 | Apr 28 | Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors |
| CVE-2017-2117 | CU CubeCart CubeCart Limited | 4.9 | Apr 28 | Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors |