CubeCart
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 44 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 31, 2008 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass
CubeCart: Missing Authorization Check for Order Note Deletion in orders.index.inc.php
CubeCart: CSRF Protection Missing for Download Resets and Card Deletions in orders.index.inc.php
CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.php
CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php
CubeCart: Missing Authorization Check in customers.gdpr.inc.php Leads to Unauthorized Customer Data Deletion
CubeCart: Authenticated RCE via Invoice Template → Order Print
CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header
CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE
CubeCart: Authenticated SQL Injection via `sort[]` Parameter in Admin Orders Transactions Listing
Monitor CubeCart in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.