CVE-2026-54647

7.2 Élevée

Publiée le 18/09/2026 à 00:17 · Modifiée le 24/09/2026 à 23:17 · Analyse NVD reportée · Source : security-advisories@github.com

Description

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled download_expire POST parameter into a raw UPDATE statement for CubeCart_downloads without numeric validation. An authenticated administrator can supply a comma-delimited value that changes the SET clause because HTML sanitization does not neutralize SQL syntax, allowing manipulation of database columns and potentially other data within the application's database privileges. This issue is fixed in version 6.7.5.

Traduire en français

Produits concernés

cubecart v6

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.2 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-89

Références

https://github.com/cubecart/v6/blob/6.7.5/admin/sources/release_notes/6.7.5.inc.php
https://github.com/cubecart/v6/commit/af7def4d279f7cefb23c1009a987737c16a105da
https://github.com/cubecart/v6/releases/tag/6.7.5
https://github.com/cubecart/v6/security/advisories/GHSA-hvmw-v8gc-4c29

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories