Cubecart@2.0.1 Security Vulnerabilities and Issues — Cubecart@2.0.1 CVE List

Lucene search

DevellionCubecart2.0.1

6 matches found

CVE•added 2005/05/02 4:0 a.m.•45 views

CVE-2005-0607

CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) c...

5CVSS6.7AI score0.00404EPSS

CVE•added 2005/05/02 4:0 a.m.•43 views

CVE-2005-0606

Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) pag...

4.3CVSS6AI score0.07955EPSS

CVE•added 2005/05/02 4:0 a.m.•40 views

CVE-2005-0443

index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.

4.3CVSS5.9AI score0.00509EPSS

CVE•added 2005/02/20 5:0 a.m.•37 views

CVE-2004-1580

SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

7.5CVSS8.4AI score0.00824EPSS

CVE•added 2005/02/20 5:0 a.m.•34 views

CVE-2004-1579

index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.

5CVSS7AI score0.00346EPSS

CVE•added 2005/05/02 4:0 a.m.•34 views

CVE-2005-0442

Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.

5CVSS6.8AI score0.08911EPSS