CVE-2003-1500: Cpcommerce

Medium severity, CVSS 6.8. EPSS: 3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.

Affected products

• Cpcommerce Cpcommerce: version 0.5f only

Published 2003-12-31. Last modified 2026-06-16.