Back

CVE-2005-1003

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.

Published: May 2, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
profitcode payprocart 3.0

GitHub Security Advisory GHSA-36gj-hrwr-4j4c

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.07%

Top 20% most likely to be exploited

Threat Score 30.6 / 100

Data Sources

NVD EPSS GitHub