CVE-2012-0865

no score yetEPSS 2.8%

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2012-02-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cubecart:cubecart

References

http://archives.neohapsis.com/archives/bugtraq/2012-02/0058.html
http://osvdb.org/79140
http://osvdb.org/79141
http://www.openwall.com/lists/oss-security/2012/02/12/4
http://www.openwall.com/lists/oss-security/2012/02/13/5

Check your stack JSON