high7.5
CVE-2007-1477
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via…
Impact
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg_language parameter. NOTE: this issue has been disputed by CVE, since the cfg_language variable is configured upon proper product installation
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oscommerce | Php Point Of Sale | Version 1.1 |
References
- NVD record
- CVE.org record
- http://attrition.org/pipermail/vim/2007-April/001564.html
- http://securityreason.com/securityalert/2426
- http://www.securityfocus.com/archive/1/462970/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33006
- http://attrition.org/pipermail/vim/2007-April/001564.html
- http://securityreason.com/securityalert/2426
- http://www.securityfocus.com/archive/1/462970/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33006