CubeCart SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in CubeCart versions prior to 6.6.0. This vulnerability allows an attacker to execute arbitrary SQL statements on the product database.

Impact

Exploitation of this vulnerability could lead to unauthorized database access, allowing attackers to manipulate or retrieve sensitive information.

Remediation

Users are advised to update CubeCart to version 6.6.0 or later, where this vulnerability has been addressed.

Added: Apr 17, 2026, 6:23 AM
Updated: Apr 17, 2026, 6:23 AM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
2.5
exploitability
6.4
remediation
7.7
relevance
6.0
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.