CVE-2012-0865
21.02.2012, 13:31
Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cubecart | cubecart | 𝑥 ≤ 3.0.20 |
| cubecart | cubecart | 3.0.0 |
| cubecart | cubecart | 3.0.1 |
| cubecart | cubecart | 3.0.2 |
| cubecart | cubecart | 3.0.3 |
| cubecart | cubecart | 3.0.4 |
| cubecart | cubecart | 3.0.5 |
| cubecart | cubecart | 3.0.6 |
| cubecart | cubecart | 3.0.7 |
| cubecart | cubecart | 3.0.8 |
| cubecart | cubecart | 3.0.9 |
| cubecart | cubecart | 3.0.10 |
| cubecart | cubecart | 3.0.11 |
| cubecart | cubecart | 3.0.12 |
| cubecart | cubecart | 3.0.13 |
| cubecart | cubecart | 3.0.14 |
| cubecart | cubecart | 3.0.15 |
| cubecart | cubecart | 3.0.16 |
| cubecart | cubecart | 3.0.17 |
| cubecart | cubecart | 3.0.18 |
| cubecart | cubecart | 3.0.19 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References