PatchTheCVEdevellion vulnerabilities
Recent CVEs affecting devellion products. 21 tracked.
devellion has 21 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-05-24. Highest priority: CVE-2006-4267 (score 54/100).
- CVE-2007-2862 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQ
- CVE-2007-2550 MEDIUM 5.0 DOWNGRADE Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrar
- CVE-2006-5109 MEDIUM 5.0 DOWNGRADE Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1)
- CVE-2006-5108 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inje
- CVE-2006-5107 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary
- CVE-2006-4527 LOW 2.6 DOWNGRADE includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an in
- CVE-2006-4526 HIGH 7.5 UPGRADE SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_
- CVE-2006-4525 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, all
- CVE-2006-4268 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to i
- CVE-2006-4267 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitr
- CVE-2006-0922 MEDIUM 5.0 DOWNGRADE CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a miss
- CVE-2006-0245 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arb
- CVE-2006-0064 HIGH 7.5 MITIGATE PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to
- CVE-2005-3152 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitra
- CVE-2005-1033 MEDIUM 5.0 DOWNGRADE CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter t
- CVE-2005-0607 MEDIUM 5.0 DOWNGRADE CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls
- CVE-2005-0606 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in mult
- CVE-2005-0443 MEDIUM 4.3 DOWNGRADE index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) cond
- CVE-2005-0442 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary fi
- CVE-2004-1580 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL co
- CVE-2004-1579 MEDIUM 5.0 DOWNGRADE index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an
FAQ
How do I fix devellion vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is devellion being exploited right now?
None of the tracked devellion CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which devellion CVE should I patch first?
CVE-2006-4267 currently ranks highest (54/100): Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitr.