Unscored CVE-2007-0230 EUVD-2007-0232GHSA-crrr-c9vf-88c2

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in …

Published Jan 13, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use

References

cscart-install-file-include(31408) vdb-entry
31277 vdb-entry
20070109 CS-Cart 1.3.3 (install.php) Remote File Include Vulnerability mailing-list
20070110 [bogus] [ahmed_labib_hilmy at yahoo.com: CS-Cart 1.3.3 (install.php) Remote File Include Vulnerability] (fwd) mailing-list