CVE-2005-1033

EPSS 3.75%
Published 02.05.2005 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Devellion ≫ Cubecart Version2.0.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.75%	0.876

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://www.osvdb.org/14064

http://marc.info/?l=bugtraq&m=111281457918479&w=2

http://securitytracker.com/id?1013660

https://nvd.nist.gov/vuln/detail/CVE-2005-1033

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-1033

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-1033

EUVD