Unscored CVE-2006-3537 EUVD-2006-3532GHSA-2xwc-mg8p-7jrr

PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the d…

Published Jul 12, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter, a different vector than CVE-2006-3375.

References

ADV-2006-2740 vdb-entry
18865 vdb-entry
1213 third-party-advisory
randshop-index-file-include(27540) vdb-entry
randshop-headerinc-file-include(27541) vdb-entry
20060706 randshop <= 1.1.x (index.php) Remote File Inclusion Vulnerability mailing-list