CVE-2005-1003

Published: May 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.

Affected (1)

Products: Profitcode: Payprocart

Profitcode

1 product

Payprocart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Profitcode Payprocart	Version 3.0

References (8)

http://marc.info/?l=bugtraq&m=111264602406090&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14832

Source: cve@mitre.org

Exploit

http://securitytracker.com/id?1013640

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/19954

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=111264602406090&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/14832

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://securitytracker.com/id?1013640

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/19954

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.