← All advisories

Critical severity9.8NVD Advisory· Published Jan 15, 2019· Updated Jun 17, 2026

CVE-2018-20716

CVE-2018-20716

Description

CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Cubecart/Cubecartinferred3 versions
<6.1.13+ 2 more
- (no CPE)range: <6.1.13
- cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*range: <6.1.13
- (no CPE)range: <6.1.13

Patches

Vulnerability mechanics

References

1

blog.ripstech.com/2018/cubecart-admin-authentication-bypass/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.