Unscored CVE-2007-3081 EUVD-2007-3073GHSA-m84v-2393-94pr

PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP cod…

Published Jun 6, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.

References

2779 third-party-advisory
20070603 Comdev eCommerce 4.1 RFI Vulnerability mailing-list
ecommerce-sampleecommerce-file-include(34704) vdb-entry
38362 vdb-entry