[webapps] CubeCart 6.7.4 - SQL injection

A second proof-of-concept SQL injection exploit for CubeCart 6.7.4 was published on Exploit-DB.

Exploit-DB lists a SQL injection proof-of-concept affecting CubeCart 6.7.4, the open-source shopping cart application. The entry demonstrates the flaw but the provided text does not include a CVE identifier or reports of exploitation in the wild. It appears alongside related CubeCart XSS and SQL injection listings published the same day.

• SQL injection PoC published for CubeCart 6.7.4
• Released alongside other CubeCart exploit listings
• No evidence of in-the-wild exploitation provided