CVE-2026-45054 — CubeCart is an ecommerce software solution. Prior to 6.7.0,

title: CubeCart admin.php ORDER BY SQL Injection (CVE-2026-45054)
id: scw-2026-05-13-ai-1
status: experimental
level: critical
description: |
  Detects attempts to exploit CVE-2026-45054 in CubeCart by targeting the admin orders-transactions listing page with a crafted ORDER BY SQL injection. The rule looks for the specific URI path and query parameters indicative of an attempt to inject SQL commands, such as UNION SELECT statements to extract sensitive data like password hashes or credentials.
author: SCW Feed Engine (AI-generated)
date: 2026-05-13
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-45054/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/admin.php?_g=orders&node=transactions'
      cs-uri-query|contains:
          - 'ORDER BY'
      cs-uri-query|contains:
          - 'UNION'
      cs-uri-query|contains:
          - 'SELECT'
      cs-uri-query|contains:
          - 'password'
      cs-uri-query|contains:
          - 'hash'
      cs-uri-query|contains:
          - 'credential'
      condition: cs-uri AND cs-uri-query
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse