CVE-2005-1033: Medium severity Devellion CubeCart vulnerability

Published Apr 9, 2005

Updated

CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to viewcart.php, or (5) product parameter to viewproduct.php, which reveals the path in a PHP error message.

Affected Software

1 affected component

Devellion CubeCart=2.0.6

Event History

Apr 9, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1033?

CVE-2005-1033 is classified as a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2005-1033?

To fix CVE-2005-1033, you should upgrade CubeCart to a version later than 2.0.6 that addresses this vulnerability.

What types of sensitive information can be leaked due to CVE-2005-1033?

CVE-2005-1033 can leak sensitive information via parameters in various PHP scripts, leading to exposure of internal application information.

Which version of CubeCart is affected by CVE-2005-1033?

CVE-2005-1033 affects CubeCart version 2.0.6.

Is CVE-2005-1033 exploitable remotely?

Yes, CVE-2005-1033 is remotely exploitable by attackers who manipulate specific parameters in the application.