description: CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
problem types: OS command injection
affected:
{
vendor: CubeCart Limited
product: CubeCart
versions:
version: prior to 6.5.3, status: affected
}