5
CVSSv2

CVE-2005-0442

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote malicious users to read arbitrary files via the language parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

devellion cubecart 2.0.4

devellion cubecart 2.0.1

Exploits

source: wwwsecurityfocuscom/bid/12549/info Brooky CubeCart is reported prone to multiple vulnerabilities These issues result from insufficient sanitization of user-supplied data and may allow remote attackers to disclose arbitrary files and carry out cross-site scripting attacks The application is reportedly susceptible to a remote d ...