CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.

Published Jan 15, 2019 · Updated Aug 5, 2024 · Assigned by mitre