CVE:CVE-2005-0442
CNNVD:CNNVD-200505-104
CubeCart 2.0.4内的index.php中的目录遍历漏洞使得远程攻击者可以通过language参数读取任意文件。
solution:Upgrade devellion cubecart to a higher version than 2.0.1,2.0.4,and avoid the version 2.0.1,2.0.4