ID CVE-2005-0442
Summary Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 12549
bugtraq
  • 20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities
  • 20050406 RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure
confirm http://www.cubecart.com/site/forums/index.php?showtopic=5741
secunia 14272
xf cubecart-dotdot-directory-traversal(19322)
Last major update 11-07-2017 - 01:32
Published 02-05-2005 - 04:00
Last modified 11-07-2017 - 01:32
Back to Top