Back
CVE-2003-1500
PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.
Published: Dec 31, 2003
Modified: Jun 16, 2026
CWE-94
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| cpcommerce | cpcommerce | 0.5f |
GitHub Security Advisory GHSA-5qgc-c76m-gxvg
PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote...
References (12)
- http://cpcommerce.org/forums/index.php?board=2%3Baction=display%3Bthreadid=864
- http://securityreason.com/securityalert/3301
- http://www.securiteam.com/unixfocus/6H00E2K8KG.html
- http://www.securityfocus.com/archive/1/341757
- http://www.securityfocus.com/bid/8851
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13457
- http://cpcommerce.org/forums/index.php?board=2%3Baction=display%3Bthreadid=864
- http://securityreason.com/securityalert/3301
- http://www.securiteam.com/unixfocus/6H00E2K8KG.html
- http://www.securityfocus.com/archive/1/341757
- http://www.securityfocus.com/bid/8851
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13457
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
2.79%
Top 15% most likely to be exploited
Threat Score
28 / 100
Data Sources
NVD
EPSS
GitHub