Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1005. PoCs published by Diabolic Crab.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in PayProCart 3.0, allowing unauthenticated access to administrative files via crafted HTTP GET requests. The provided URL demonstrates traversal to access sensitive files, potentially leading to authentication bypass.
Description
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.
Exploits (1)
The exploit describes a directory traversal vulnerability in PayProCart 3.0, allowing unauthenticated access to administrative files via crafted HTTP GET requests. The provided URL demonstrates traversal to access sensitive files, potentially leading to authentication bypass.