CVE-2005-1003 Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| profitcode payprocart | = 3.0 | No fix listed |
References
- 20050404 Authenticaion bypass, Directory transversal and XSS mailing-list
- 14832 exploit third-party-advisory
- 1013640 exploit vdb-entry
- payprocart-dotdot-directory-traversal(19954) vdb-entry