CVE-2005-1005: Profitcode Payprocart

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.

Affected products

• Profitcode Payprocart: version 3.0 only

Published 2005-05-02. Last modified 2026-06-16.