CVE

Id
11813  
CVE No.
CVE-2005-0607  
Status
Candidate  
Description
CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message.  
Phase
Assigned (20050301)  
Votes
None (candidate not yet proposed)  
Comments