Description
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray[] parameter.
Unscored
CVE-2006-4526
EUVD-2006-4514GHSA-hj3j-9p6j-p26g
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows re…
Published Sep 1, 2006 · Updated Sep 17, 2024 · Assigned by mitre