CubeCart 'shipKey' Parameter SQL Injection Vulnerability

Bugtraq ID:	40641
Class:	Input Validation Error
CVE:	CVE-2010-1931
Remote:	Yes
Local:	No
Published:	Jun 08 2010 12:00AM
Updated:	Jun 08 2010 12:00AM
Credit:	7Safe
Vulnerable:	CubeCart CubeCart 4.3.9 CubeCart CubeCart 4.3.8 CubeCart CubeCart 4.3.7 CubeCart CubeCart 4.3.6 CubeCart CubeCart 4.3.5 CubeCart CubeCart 4.3.4 CubeCart CubeCart 4
Not Vulnerable:	CubeCart CubeCart 4.4

CubeCart 'shipKey' Parameter SQL Injection Vulnerability

CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to CubeCart 4.4.0 are vulnerable.

CubeCart 'shipKey' Parameter SQL Injection Vulnerability

References:

• CubeCart < 4.4.0 Security Patch, Possible SQL Injection Security Update (CubeCart)
  
• CubeCart Homepage (CubeCart)
  
• [CORE-2010-0415] SQL Injection in CubeCart PHP Free & Commercial Shopping Cart (CORE Security Technologies Advisories )
  
• CORE-2010-0415 SQL Injection in CubeCart PHP Free & Commercial Shopping Cart App (CORE Security Technologies)