CVE-2007-2862

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.09%

Published

May 24, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQL commands via an unspecified parameter to cart.inc.php and certain other files in an include directory, related to missing sanitization of the $option variable and possibly cookie modification.

Affected Products (1)

devellion · cubecartvulnerable

References (10)

http://osvdb.org/38100

http://securityreason.com/securityalert/2730

http://www.securityfocus.com/archive/1/469301/100/0/threaded

http://www.securityfocus.com/bid/24100

https://exchange.xforce.ibmcloud.com/vulnerabilities/34460

http://osvdb.org/38100

http://securityreason.com/securityalert/2730

http://www.securityfocus.com/archive/1/469301/100/0/threaded

http://www.securityfocus.com/bid/24100

https://exchange.xforce.ibmcloud.com/vulnerabilities/34460

KEV Catalog EPSS Scores Vendors All CVEs