CVE-2012-0865

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
cubecartcubecart
𝑥
≤ 3.0.20
cubecartcubecart
3.0.0
cubecartcubecart
3.0.1
cubecartcubecart
3.0.2
cubecartcubecart
3.0.3
cubecartcubecart
3.0.4
cubecartcubecart
3.0.5
cubecartcubecart
3.0.6
cubecartcubecart
3.0.7
cubecartcubecart
3.0.8
cubecartcubecart
3.0.9
cubecartcubecart
3.0.10
cubecartcubecart
3.0.11
cubecartcubecart
3.0.12
cubecartcubecart
3.0.13
cubecartcubecart
3.0.14
cubecartcubecart
3.0.15
cubecartcubecart
3.0.16
cubecartcubecart
3.0.17
cubecartcubecart
3.0.18
cubecartcubecart
3.0.19
𝑥
= Vulnerable software versions