Description
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CubeCart | CubeCart | prior to 6.6.0 | — |
Medium · 6.3
CVE-2026-34018
EUVD-2026-23368
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the …
Published Apr 17, 2026 · Updated Apr 17, 2026 · Assigned by jpcert