Approved changes feed: RSS · Atom

cpe:2.3:a:cubecart_limited:cubecart:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCubecart Limited (b94499b3-61d9-5fe0-b389-2e3599cdf40c)
ProductCubecart (695d45f4-cfef-54e2-aa63-c8d354e91b45)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-35496 vulnerable 2026-06-08 07:59:14.058431 Details available
LOW (2.7)
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible.
Published: 2026-04-17T04:33:49.813Z
Updated: 2026-04-17T12:18:33.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34018 vulnerable 2026-06-08 07:59:11.690112 Details available
MEDIUM (6.3)
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product.
Published: 2026-04-17T04:33:35.768Z
Updated: 2026-04-17T12:20:12.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21719 vulnerable 2026-06-08 07:49:16.709945 Details available
HIGH (7.2)
An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command.
Published: 2026-04-17T04:33:17.708Z
Updated: 2026-04-17T12:21:48.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47675 vulnerable 2026-06-08 06:14:25.364199 Details available
CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
Published: 2023-11-17T04:37:54.033Z
Updated: 2024-08-02T21:16:42.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47283 vulnerable 2026-06-08 06:14:24.612833 Details available
Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.
Published: 2023-11-17T04:37:37.783Z
Updated: 2024-08-02T21:09:36.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42428 vulnerable 2026-06-08 06:11:08.043567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38130 vulnerable 2026-06-08 06:08:16.953530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2117 vulnerable 2026-06-08 05:09:23.630820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2098 vulnerable 2026-06-08 05:09:23.578904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.