Unscored CVE-2005-1003 EUVD-2005-1006GHSA-36gj-hrwr-4j4c

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. …

Published Apr 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.

References

20050404 Authenticaion bypass, Directory transversal and XSS mailing-list
1013640 vdb-entry
payprocart-dotdot-directory-traversal(19954) vdb-entry
14832 third-party-advisory