CVE

Id
41495  
CVE No.
CVE-2009-4060  
Status
Candidate  
Description
SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.  
Phase
Assigned (20091123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455965 41495 CVE-2009-4060 CONFIRM:http://forums.cubecart.com/index.php?showtopic=39900  View
455966 41495 CVE-2009-4060 BID:37065  View
455967 41495 CVE-2009-4060 URL:http://www.securityfocus.com/bid/37065  View
455968 41495 CVE-2009-4060 OSVDB:60306  View
455969 41495 CVE-2009-4060 URL:http://osvdb.org/60306  View
455970 41495 CVE-2009-4060 SECUNIA:37402  View
455971 41495 CVE-2009-4060 URL:http://secunia.com/advisories/37402  View
455972 41495 CVE-2009-4060 VUPEN:ADV-2009-3290  View
455973 41495 CVE-2009-4060 URL:http://www.vupen.com/english/advisories/2009/3290  View
455974 41495 CVE-2009-4060 XF:cubecart-viewprod-sql-injection(54331)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45477 JVNDB-2009-006484 Drupal 用の Gallery Assist モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用の Gallery Assist モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4064 41495 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006484.html  View