PT-2005-1653 · Cubecart · Cubecart

Booker + 1 · Published 2005-03-01 · Updated 2017-07-11 · CVE-2005-0606

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CubeCart versions 2.0.0 through 2.0.5

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary HTML or web script via certain parameters, including cat id, PHPSESSID, view doc, product, session, catname, search, or page.

Recommendations For CubeCart versions 2.0.0 through 2.0.5, update to a version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2005-0606

Affected Products

Cubecart

References · 9

• 🔥 http://securitytracker.com/id?1013304 · Exploit
• 🔥 https://exploit-db.com/exploits/25162 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html · Exploit
• 🔥 http://securityfocus.com/bid/12658 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0606 · Security Note
• http://cubecart.com/site/forums/index.php?showtopic=6032 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0606 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20637 · Note
• http://secunia.com/advisories/14416 · Note