SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray[] parameter.
References
Configurations
History
No history.
Information
Published : 2006-09-01 23:04
Updated : 2024-02-04 16:52
NVD link : CVE-2006-4526
Mitre link : CVE-2006-4526
CVE.ORG link : CVE-2006-4526
JSON object : View
Products Affected
devellion
- cubecart
CWE