Description
PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.
References
- 57768 vdb-entry
- wp-shopstyling-generatepdf-file-include(81931) vdb-entry
- http://wordpress.org/plugins/wp-ecommerce-shop-styling/changelog/
- 51707 third-party-advisory
- 89921 vdb-entry