CVE-2010-4903

CVE-2010-4903

EPSS 1.1%

SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/41352 http://securityreason.com/securityalert/8441 http://www.acunetix.com/blog/web-security-zone/articles/sql-injection-xss-cubecart-4-3-3/http://www.securityfocus.com/archive/1/513572/100/0/threaded http://www.securityfocus.com/bid/43114