CVE-2004-0240: Qualiteam X-Cart

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.

Affected products

• Qualiteam X-Cart: version 3.2.0 only; version 3.2.1 only; version 3.3.0 only; version 3.3.2 only; version 3.4.0 only; version 3.4.3 only; …

Published 2004-11-23. Last modified 2026-06-16.