CVE-2026-45054

CubeCart is an ecommerce software solution. Prior to 6.7.0, the admin orders-transactions listing page (admin.php?_g=orders&node=transactions) builds a raw ORDER BY SQL fragment from the attacker-controlled $_GET['sort'] array without column or direction validation. Both the column key and the direction value flow into the query string as bare SQL tokens, and the framework's sqlSafe() (mysqli escape_string) escapes only quote characters — none of which are required for ORDER BY injection. An authenticated administrator with the minimum CC_PERM_READ permission on orders can execute arbitrary SQL against the store database, including time-based blind extraction of admin password hashes, customer PII, and integrated payment-gateway credentials. This vulnerability is fixed in 6.7.0.

• CWE-89

• https://github.com/cubecart/v6/security/advisories/GHSA-rm2f-rpcq-6w9f
• https://github.com/cubecart/v6/security/advisories/GHSA-rm2f-rpcq-6w9f

Published

May 13, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45044RustFS is a distributed object storage system built in Rust.…8.8
• CVE-2026-45045Fiber is an Express inspired web framework written in Go. Pr…5.3
• CVE-2026-45046Gryph provides a security layer for AI coding agents. Prior …5.5
• CVE-2026-45047bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, th…7.5
• CVE-2026-4505A vulnerability has been found in eosphoros-ai DB-GPT up to …6.3
• CVE-2026-45053CubeCart is an ecommerce software solution. Prior to 6.7.0, …9.1
• CVE-2026-45055CubeCart is an ecommerce software solution. Prior to 6.7.2, …8.1
• CVE-2026-45058electerm is an open-sourced terminal/ssh/sftp/telnet/serialp…9.4
• CVE-2026-4506A vulnerability was found in Mindinventory MindSQL up to 0.2…6.3
• CVE-2026-45060ClipBucket v5 is an open source video sharing platform. Prio…9.8
• CVE-2026-45061Budibase is an open-source low-code platform. Prior to 3.35.…7.7
• CVE-2026-45062FrankenPHP is a modern application server for PHP. From vers…8.1