Advisories · Technology

CubeCart.

Every CVE that names CubeCart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-35496 CVE record

CVSS 5.1 Medium

Path traversal in CubeCart
- CubeCart
- Path traversal
Not analysed yet 17 Apr 2026
CVE-2026-34018 CVE record

CVSS 5.1 Medium

SQL injection in CubeCart
- CubeCart
- SQL injection
Not analysed yet 17 Apr 2026
CVE-2026-21719 CVE record

CVSS 8.6 High

OS command injection in CubeCart
- CubeCart
- Command injection
Not analysed yet 17 Apr 2026
CVE-2023-47675 CVE record

CubeCart: CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative…
- CubeCart
Not analysed yet 17 Nov 2023
CVE-2023-47283 CVE record

CubeCart: Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote…
- CubeCart
Not analysed yet 17 Nov 2023
CVE-2023-42428 CVE record

CubeCart: Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote…
- CubeCart
Not analysed yet 17 Nov 2023
CVE-2023-38130 CVE record

CubeCart: Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a…
- CubeCart
Not analysed yet 17 Nov 2023
CVE-2017-2117 CVE record

CubeCart: Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker…
- CubeCart
Not analysed yet 28 Apr 2017
CVE-2017-2098 CVE record

CubeCart: Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote…
- CubeCart
Not analysed yet 28 Apr 2017