Description (CNA)
Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/38574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56358
- http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt
- http://www.exploit-db.com/exploits/11433
ADP enrichment
No English description supplied.