<![CDATA[TulipTools Internet Business Owners and Online Sellers Community

<![CDATA[TulipTools Internet Business Owners and Online Sellers Community - CubeCart]]> https://community.tuliptools.com/ Sun, 13 Sep 2026 01:53:58 +0000 MyBB <![CDATA[Cube Cart 3.015 Demo Store]]> https://community.tuliptools.com/thread-6597.html Thu, 25 Jan 2007 03:42:38 -0500 TulipNewsBot]]> https://community.tuliptools.com/thread-6597.html Cube Cart 3.015 Demo Store

http://demos.tuliptools.com/cube/index.php

]]> Cube Cart 3.015 Demo Store

http://demos.tuliptools.com/cube/index.php

]]> <![CDATA[CubeCart 3.x Security Advisory issued 8/18-patch available]]> https://community.tuliptools.com/thread-4707.html Sat, 19 Aug 2006 06:57:15 -0400 mandy]]> https://community.tuliptools.com/thread-4707.html Quote:Description:
rgod has reported some vulnerabilities in CubeCart, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.

Solution:
Update to version 3.0.12.
https://www.cubecart.com/site/he...ategoryid=5&pcid=0&nav=0
full advisory: http://secunia.com/advisories/21538/

Quote:Security Patch
A vulnerability report has been issued to us concerning XSS (Cross Site Scripting) and MySQL Injection vulnerabilities in all current versions of CubeCart.

Please see: http://bugs.cubecart.com/?do=details&id=523

We urge all to patch their stores at the first possible opportunity. This vulnerability is due to the fact certain variables are not properly sanitized.

This patch resolves the issues using the treatGet function already in place in the code.

To upgrade please download the file CubeCart_Patch_17Aug06.zip extract it and upload the contents over the files that already reside on your site. Manual upgrade instructions can be found in the file CubeCart_Patch_17Aug06_changelog.html which is also attached.

Even if you don't use the Authorize.net or Protx module you must update the files!

CubeCart 3.0.12
A new release will be made today which includes this patch and Spam Bot flood control protection as we have had reports of the tell a friend tool being abused. There will also be path upgrades in the PayPal SDK and other minor issues fixed.

http://www.cubecart.com/site/forums/inde...opic=21247
patch available here: http://www.cubecart.com/site/forums/index.php?s=1aaa71402082c99a896fdf68db0d031a&act=Attach&type=post&id=680]]> Quote:Description:
rgod has reported some vulnerabilities in CubeCart, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.

Solution:
Update to version 3.0.12.
https://www.cubecart.com/site/he...ategoryid=5&pcid=0&nav=0
full advisory: http://secunia.com/advisories/21538/

Quote:Security Patch
A vulnerability report has been issued to us concerning XSS (Cross Site Scripting) and MySQL Injection vulnerabilities in all current versions of CubeCart.

Please see: http://bugs.cubecart.com/?do=details&id=523

We urge all to patch their stores at the first possible opportunity. This vulnerability is due to the fact certain variables are not properly sanitized.

This patch resolves the issues using the treatGet function already in place in the code.

To upgrade please download the file CubeCart_Patch_17Aug06.zip extract it and upload the contents over the files that already reside on your site. Manual upgrade instructions can be found in the file CubeCart_Patch_17Aug06_changelog.html which is also attached.

Even if you don't use the Authorize.net or Protx module you must update the files!

CubeCart 3.0.12
A new release will be made today which includes this patch and Spam Bot flood control protection as we have had reports of the tell a friend tool being abused. There will also be path upgrades in the PayPal SDK and other minor issues fixed.