high7.5Public exploit code
CVE-2005-1005
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- profitcode software payprocart 3.0 - Directory Traversal2005-04-05 · webapps · php · Verified
Impact
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Profitcode | Payprocart | Version 3.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111264602406090&w=2
- http://secunia.com/advisories/14832
- http://securitytracker.com/id?1013640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19956
- http://marc.info/?l=bugtraq&m=111264602406090&w=2
- http://secunia.com/advisories/14832
- http://securitytracker.com/id?1013640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19956