CVE-2003-1500

cpCommerce 0.5f - Remote Code Execution via _functions.php Prefix Parameter

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.

References (6)

Core 6
Core References
Various Sources x_refsource_misc
http://www.securiteam.com/unixfocus/6H00E2K8KG.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/13457
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/8851
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/341757
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3301

Scores

EPSS 0.0279
EPSS Percentile 84.7%

Details

CWE
CWE-94
Status published
Products (1)
cpcommerce/cpcommerce 0.5f
Published Dec 31, 2003
Tracked Since Feb 18, 2026