Unscored CVE-2005-0897 EUVD-2005-0898GHSA-jxf3-2j6q-9wgq

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP cod…

Published Mar 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code.

References

20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition mailing-list
12910 vdb-entry