CVE-2009-4060

ALTO 7.5CVE-2009-4060 · Published 24/11/2009 · updated 16/06/2026

Em resumo

CVE-2009-4060 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta cubecart (cubecart).
Chance de exploração nos próximos 30 dias (EPSS): 2.2%, maior que 82.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
cubecart cubecart	`= 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.20= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.1.0= 4.1.1= 4.2.0= 4.2.1= 4.2.2= 4.2.3= 4.3.0= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5≤ 4.3.6`	No fix yet

Description

SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.

References

forums.cubecart.com/index.php
osvdb.org/60306
secunia.com/advisories/37402 · Vendor Advisory
securityfocus.com/bid/37065
vupen.com/english/advisories/2009/3290 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/54331

Mais vulnerabilidades de cubecart

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cubecart

= 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.20= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.1.0= 4.1.1= 4.2.0= 4.2.1= 4.2.2= 4.2.3= 4.3.0= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5≤ 4.3.6

No fix yet

Mais vulnerabilidades de cubecart

Ver tudo →