PT-2007-1711 · Cs Cart · Cs-Cart
CVE-2007-0230
·
Publicado
2007-01-13
·
Atualizado
2024-08-07
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
CS-Cart version 1.3.3
Description
A remote file inclusion issue in the install.php file allows remote attackers to execute arbitrary PHP code via a URL in the
install dir parameter.Recommendations
For CS-Cart version 1.3.3, as a temporary workaround, consider validating and sanitizing the
install dir parameter to prevent the execution of arbitrary PHP code until a patch is available.Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cs-Cart