Description
Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php, (2) checkout.php, and (3) libsecure.php.
References
- americancart-abspath-file-include(34165) vdb-entry
- 20070506 american cart 3.* (abs_path) remote file include mailing-list
- 36172 vdb-entry
- 36171 vdb-entry
- 36170 vdb-entry
- 2681 third-party-advisory