CVE Vulnerabilities

CVE-2006-4267

Published: Aug 21, 2006 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) oid parameter in modules/gateway/Protx/confirmed.php and the (2) x_invoice_num parameter in modules/gateway/Authorize/confirmed.php.

Affected Software

Name Vendor Start Version End Version
Cubecart Devellion 3.0.3 (including) 3.0.3 (including)
Cubecart Devellion 3.0.4 (including) 3.0.4 (including)
Cubecart Devellion 3.0.6 (including) 3.0.6 (including)
Cubecart Devellion 3.0.7 (including) 3.0.7 (including)
Cubecart Devellion 3.0.7-pl1 (including) 3.0.7-pl1 (including)
Cubecart Devellion 3.0.11 (including) 3.0.11 (including)

References