CubeCart Limited vulnerabilities
9 published CVEs name CubeCart Limited among the affected products.
- Published CVEs
- 9
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 6Low 0Not scored 0
CVEs per yearBy the year they were published
- 20172
- 20234
- 20263
Newest CVEs
- CVE-2026-35496
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories…
CubeCart Limited · CubeCart
Medium5.1 - CVE-2026-34018
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product.
CubeCart Limited · CubeCart
Medium5.1 - CVE-2026-21719
An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS…
CubeCart Limited · CubeCart
High8.6 - CVE-2023-47675
CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
CubeCart Limited · CubeCart
High7.2 - CVE-2023-47283
Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the…
CubeCart Limited · CubeCart
Medium4.9 - CVE-2023-42428
Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and…
CubeCart Limited · CubeCart
Medium6.5 - CVE-2023-38130
Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system.
CubeCart Limited · CubeCart
High8.1 - CVE-2017-2117
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.
CubeCart Limited · CubeCart
Medium4.9 - CVE-2017-2098
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
CubeCart Limited · CubeCart
Medium6.5