critical9.8Public exploit code
CVE-2009-1936
_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to b…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion2009-05-26 · webapps · php · Verified
Impact
_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpcommerce Project | Cpcommerce | from 1.2.0 through 1.2.9 |