Cubecart@2.0.4 Security Vulnerabilities and Issues — Cubecart@2.0.4 CVE List

Lucene search

DevellionCubecart2.0.4

2 matches found

CVE•added 2005/05/02 4:0 a.m.•40 views

CVE-2005-0443

index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.

4.3CVSS5.9AI score0.00509EPSS

CVE•added 2005/05/02 4:0 a.m.•34 views

CVE-2005-0442

Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.

5CVSS6.8AI score0.08911EPSS