Sangte Amtham

1 exploit Active since Nov 2009
CVE-2009-4060 EXPLOITDB text WORKING POC
CubeCart < 4.3.7 - SQL Injection via productId Parameter
SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.