Unscored CVE-2004-1579 EUVD-2004-1573GHSA-359x-29v3-4rrm

index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, whi…

Published Feb 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.

References

20041006 Full path disclosure and sql injection on CubeCart 2.0.1 mailing-list
cubecart-catid-path-disclosure(17630) vdb-entry