CVE-2012-0865: Cubecart

Medium severity, CVSS 5.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.

Affected products

• Cubecart Cubecart: up to and including 3.0.20; version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2012-02-21. Last modified 2026-06-16.