Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
DevellionCubecart

8 matches found

CVE
CVE•added 2005/05/02 4:0 a.m.•54 views

CVE-2005-1033

CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals ...

5CVSS6.3AI score0.03745EPSS
CVE
CVE•added 2005/05/02 4:0 a.m.•45 views

CVE-2005-0607

CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) c...

5CVSS6.7AI score0.00404EPSS
CVE
CVE•added 2005/05/02 4:0 a.m.•43 views

CVE-2005-0606

Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) pag...

4.3CVSS6AI score0.07955EPSS
CVE
CVE•added 2005/05/02 4:0 a.m.•40 views

CVE-2005-0443

index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.

4.3CVSS5.9AI score0.00509EPSS
CVE
CVE•added 2005/10/05 10:2 p.m.•39 views

CVE-2005-3152

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php. Note: vectors (1) and (2) were later reporte...

4.3CVSS5.7AI score0.07397EPSS
CVE
CVE•added 2005/02/20 5:0 a.m.•37 views

CVE-2004-1580

SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

7.5CVSS8.4AI score0.00824EPSS
CVE
CVE•added 2005/02/20 5:0 a.m.•34 views

CVE-2004-1579

index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.

5CVSS7AI score0.00346EPSS
CVE
CVE•added 2005/05/02 4:0 a.m.•34 views

CVE-2005-0442

Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.

5CVSS6.8AI score0.08911EPSS