CVE-2005-3152

🗓️ 05 Oct 2005 04:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

CVE-2005-3152 Cross-Site Scripting (XSS) vulnerabilities in CubeCart 3.0.

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Brooky CubeCart < 3.0.4 Multiple XSS	29 Sep 200500:00	–	nessus
Tenable Nessus	CubeCart < 3.0.4 Multiple Script XSS	6 Oct 200500:00	–	nessus
Cvelist	CVE-2005-3152	5 Oct 200504:00	–	cvelist
Exploit DB	CubeCart 3.0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	28 Sep 200500:00	–	exploitdb
Exploit DB	CubeCart 3.0.3 - 'cart.php?redir' Cross-Site Scripting	28 Sep 200500:00	–	exploitdb
EUVD	EUVD-2005-3152	7 Oct 202500:30	–	euvd
NVD	CVE-2005-3152	5 Oct 200522:02	–	nvd
OpenVAS	CubeCart < 3.0.4 Multiple XSS Vulnerabilities	26 Mar 200600:00	–	openvas
OpenVAS	Multiple CubeCart XSS vulnerabilities	26 Mar 200600:00	–	openvas
Prion	Cross site scripting	18 Jan 200601:51	–	prion

NVD

Node

OR

devellion cubecartMatch3.0.3

devellion cubecartMatch3.0.7-pl1

Source	Link
bugs	www.bugs.cubecart.com/
lostmon	www.lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/24177
securitytracker	www.securitytracker.com/id
lostmon	www.lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html
securityfocus	www.securityfocus.com/bid/14962
securityreason	www.securityreason.com/securityalert/35
bugs	www.bugs.cubecart.com/

Parameter	Position	Path	Description	CWE
redir	query param	cc3/cart.php	XSS via unsanitized redir parameter in cart.php	CWE-79
redir	query param	cc3/index.php	XSS via unsanitized redir parameter in index.php	CWE-79
searchStr	query param	cc3/index.php	XSS via searchStr parameter in viewCat action to index.php	CWE-79

16 Jun 2026 22:16Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

EPSS0.02235

cve 2005 3152 cross-site scripting xss cubecart vulnerability