CVE-2005-1003: Profitcode Payprocart

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.

Affected products

• Profitcode Payprocart: version 3.0 only

Published 2005-05-02. Last modified 2026-06-16.