CVE-2004-0242: Qualiteam X-Cart

Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days.

X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.

Affected products

• Qualiteam X-Cart: version 3.2.0 only; version 3.2.1 only; version 3.3.0 only; version 3.3.2 only; version 3.4.0 only; version 3.4.3 only; …

Published 2004-11-23. Last modified 2026-06-16.