Valdersoft Shopping Cart Remote File Include Vulnerability
BID:16126
Info
Valdersoft Shopping Cart Remote File Include Vulnerability
| Bugtraq ID: | 16126 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 03 2006 12:00AM |
| Updated: | Jan 03 2006 12:00AM |
| Credit: | cijfer <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
Valdersoft Shopping Cart 3.0 |
| Not Vulnerable: | |
Discussion
Valdersoft Shopping Cart Remote File Include Vulnerability
Valdersoft Shopping Cart is prone to a remote file include vulnerability.
An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
Valdersoft Shopping Cart is prone to a remote file include vulnerability.
An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
Exploit / POC
Valdersoft Shopping Cart Remote File Include Vulnerability
No exploit is required.
The following proof of concept exploit is available:
No exploit is required.
The following proof of concept exploit is available:
Solution / Fix
Valdersoft Shopping Cart Remote File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Valdersoft Shopping Cart Remote File Include Vulnerability
References:
References:
- Valdersoft Shopping Cart Homepage (Valdersoft)