Description
SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.
References
- 20100909 SQL Injection and XSS vulnerabilities in CubeCart version 4.3.3 mailing-list
- http://www.acunetix.com/blog/web-security-zone/articles/sql-injection-xss-cubecart-4-3-3/
- 41352 third-party-advisory
- 8441 third-party-advisory
- 43114 vdb-entry