high7.5
CVE-2007-0230
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir para…
Impact
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cs-Cart | Cs-Cart | Version 1.3.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/31277
- http://www.attrition.org/pipermail/vim/2007-January/001223.html
- http://www.securityfocus.com/archive/1/456527/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31408
- http://osvdb.org/31277
- http://www.attrition.org/pipermail/vim/2007-January/001223.html
- http://www.securityfocus.com/archive/1/456527/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31408