Description
PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter.
References
- 18601 vdb-entry
- ecommerce-pathdocroot-file-include(21733) vdb-entry
- 14478 vdb-entry
- 16346 third-party-advisory
- 20050805 Comdev eCommerce config.php Vulnerability mailing-list