Approved changes feed: RSS · Atom
cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*part: a version: 2.0.4 update: *
| Vendor | Devellion (941c6ac1-fe70-51f3-8f40-89dbad609a2c) |
|---|---|
| Product | Cubecart (7ccb7378-63b3-59a4-ad60-7ab315ec07ce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-5109 |
vulnerable | 2026-06-08 04:49:19.703915 |
Details available
Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, and cat_navi.php vectors are already covered by CVE-2005-0607.
Published: 2006-10-02T20:00:00.000Z
Updated: 2024-08-07T19:41:04.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5108 |
vulnerable | 2026-06-08 04:49:19.703466 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the order_id parameter in (1) admin/print_order.php and (2) view_order.php; the (3) site_url and (4) la_search_home parameters and (5) certain language parameters in admin/nav.php; the (6) image parameter in admin/image.php; the (7) site_name, (8) la_adm_header, (9) charset, and (10) certain other parameters in admin/header.inc.php; the (12) la_pow_by parameter in footer.inc.php; and the (13) site_name parameter and (14) certain other parameters in header.inc.php.
Published: 2006-10-02T20:00:00.000Z
Updated: 2024-08-07T19:41:05.040Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5107 |
vulnerable | 2026-06-08 04:49:19.701831 |
Details available
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc parameter in view_doc.php, and (4) the order_id parameter in admin/print_order.php.
Published: 2006-10-02T20:00:00.000Z
Updated: 2024-08-07T19:41:04.054Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0443 |
vulnerable | 2026-06-08 04:48:12.662664 |
Details available
index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.
Published: 2005-02-15T05:00:00.000Z
Updated: 2024-08-07T21:13:54.140Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0442 |
vulnerable | 2026-06-08 04:48:12.662260 |
Details available
Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.
Published: 2005-02-15T05:00:00.000Z
Updated: 2024-08-07T21:13:54.174Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.