CVE-2010-0957

CVE-2010-0957

EPSS 1.3%

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/56358 http://www.exploit-db.com/exploits/11433 http://www.securityfocus.com/bid/38574