CVE-2010-1931

HIGH 7.5CVE-2010-1931 · Published 10/06/2010 · updated 16/06/2026

In short

CVE-2010-1931 is a HIGH (CVSS 7.5) vulnerability affecting cubecart (cubecart).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cubecart cubecart	`= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9`	No fix yet

Description

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.

References

forums.cubecart.com/index.php · Patch
osvdb.org/65250 · Exploit
secunia.com/advisories/40102 · Vendor Advisory
coresecurity.com/content/cubecart-php-shopping-cart-sql-injection · Exploit
securityfocus.com/archive/1/511735/100/0/threaded
securityfocus.com/bid/40641 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/59245

More vulnerabilities in cubecart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cubecart

= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9

No fix yet

More vulnerabilities in cubecart

See all →