critical9.8
CVE-2018-20716
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
Impact
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cubecart | Cubecart | before 6.1.13 |