Vulnerabilities > CVE-2005-1005 - Unspecified vulnerability in Profitcode Payprocart 3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
profitcode
exploit available
NVD
Published: 2005-05-02
Updated: 2017-07-11

Summary

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.

Vulnerable Configurations

Part Description Count
Application
Profitcode
1

Exploit-Db

descriptionProfitCode Software PayProCart 3.0 Directory Traversal Vulnerability. CVE-2005-1005. Webapps exploit for php platform
idEDB-ID:25338
last seen2016-02-03
modified2005-04-05
published2005-04-05
reporterDiabolic Crab
sourcehttps://www.exploit-db.com/download/25338/
titleprofitcode software payprocart 3.0 - Directory Traversal Vulnerability

References