Vulnerability in Valdersoft Shopping Cart
CVE-2006-0099
PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter.
EPSS: 0.044 (90.3th percentile) — read the EPSS interpretation.
Affected products
- Valdersoft Valdersoft_shopping_cart — versions 3.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)