Profitcode

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Profitcode records in CISA KEV

No Profitcode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Payprocart 3 records LOW Ppalcart 1 record LOW

Records

4 records

TI-2006-04518 CVE-2006-4672 · GHSA-7557-gr35-538w

PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a…

LOW 39

PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (1) proMod parameter to (a) index.php, or…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03321 Published 2006-09-11 No fix listed CWE-94

TI-2005-00945 CVE-2005-1005 · GHSA-4rq5-w597-7f38

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain…

LOW 38

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02978 Published 2005-04-07 No fix listed

TI-2005-00943 CVE-2005-1003 · GHSA-36gj-hrwr-4j4c

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows…

LOW 37

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02069 Published 2005-04-07 No fix listed

TI-2005-00944 CVE-2005-1004 · GHSA-7hx5-7h33-q6x5

Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0…

LOW 27

Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03973 Published 2005-04-07 No fix listed

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0