CVE-2023-38130

概要

参考情報

• forums.cubecart.com/topic/58736-cubecart-653-released-security-update · Vendor Advisory
• jvn.jp/en/jp/JVN22220399 · Patch

cubecart のその他の脆弱性

• CVE-2026-35496中 5.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-l…
• CVE-2026-34018緊急 9.8An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the p…
• CVE-2026-21719高 8.6An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute …
• CVE-2025-59413中 6.5CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows…
• CVE-2025-59412中 5.4CubeCart is an ecommerce software solution. Prior to version 6.5.11, a vulnerability exists in the product reviews feature where user-suppli…