CVE:CVE-2006-4526
CNNVD:CNNVD-200609-012
CubeCart 3.0.12及更早版本的includes/content/viewCat.inc.php中的SQL注入漏洞，在启用register_globals时，可让远程攻击者通过searchArray[]参数执行任意SQL命令。
solution:Upgrade devellion cubecart to a higher version than 3.0.12,and avoid the version (,3.0.12]