Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-4969
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-4969

Description:
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/29023

SAID
  Secunia Advisory: SA22131

OSVDB
  29198
  29199
  29200
  29201
  29202
  29203
  29204
  29205
  29206
  29207
  29208
  29209
  29210
  29211
  29212
  29213
  29214

MISC
  http://www.milw0rm.com/exploits/2393

BID
  20099


Return to the previous page.