CVE-2005-2544 PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comdev ecommerce | = 3.0 | No fix listed |
References
- 20050805 Comdev eCommerce config.php Vulnerability mailing-list
- 16346 third-party-advisory vendor-advisory
- 18601 vdb-entry
- 14478 vdb-entry
- ecommerce-pathdocroot-file-include(21733) vdb-entry