CVE-2004-1579: Medium severity Devellion CubeCart vulnerability

Published Dec 31, 2004

Updated

index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid catid parameter, which reveals the full path in a PHP error message.

Affected Software

1 affected component

Devellion CubeCart=2.0.1

Event History

Dec 31, 2004

CVE Published

05:00 AM

Feb 20, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1579?

CVE-2004-1579 is considered to have a moderate severity level due to the potential exposure of sensitive information.

How do I fix CVE-2004-1579?

To fix CVE-2004-1579, update to a version of CubeCart that is not affected by this vulnerability, such as any version later than 2.0.1.

What type of vulnerability is CVE-2004-1579?

CVE-2004-1579 is classified as an information disclosure vulnerability that can expose sensitive path information.

Who is affected by CVE-2004-1579?

Users running CubeCart version 2.0.1 are at risk from CVE-2004-1579 if they accept invalid parameters in HTTP requests.

What are the consequences of CVE-2004-1579?

The consequences of CVE-2004-1579 include the risk of exposing the website's file system structure to remote attackers.