NetSight
IP …
medium5.8Public exploit code

CVE-2012-0865

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing atta…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.

Affected products

VendorProductAffected versions
CubecartCubecart
through 3.0.20
Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4

Weakness classification

CWE-20

References