CVE-2012-0865

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.

• cubecart cubecart (<= 3.0.20) • cubecart cubecart 3.0.0 • cubecart cubecart 3.0.1 • cubecart cubecart 3.0.2 • cubecart cubecart 3.0.3 • cubecart cubecart 3.0.4 • cubecart cubecart 3.0.5 • cubecart cubecart 3.0.6 • cubecart cubecart 3.0.7 • cubecart cubecart 3.0.8 • cubecart cubecart 3.0.9 • cubecart cubecart 3.0.10 • cubecart cubecart 3.0.11 • cubecart cubecart 3.0.12 • cubecart cubecart 3.0.13 • cubecart cubecart 3.0.14 • cubecart cubecart 3.0.15 • cubecart cubecart 3.0.16 • cubecart cubecart 3.0.17 • cubecart cubecart 3.0.18 • cubecart cubecart 3.0.19