CVE-2006-4525

MEDIUM 4.3CVE-2006-4525 · Published 01/09/2006 · updated 16/06/2026

In short

CVE-2006-4525 is a MEDIUM (CVSS 4.3) vulnerability affecting cubecart (devellion).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cubecart devellion	`≤ 3.0.12`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array.

References

cubecart.com/site/forums/index.php
secunia.com/advisories/21659 · Vendor Advisory
cubecart.com/site/forums/index.php
gulftech.org
securityfocus.com/bid/19782

More vulnerabilities in cubecart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free