Vendor archive

profitcode CVEs

Beta · best-effort

4 CVEs tagged to vendor profitcode — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2006-4672

Published Sep 11, 2006

PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-1003

Published May 2, 2005

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID paramet…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-1004

Published May 2, 2005

Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-1005

Published May 2, 2005

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to a…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1