CVE-2006-4672 PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (1) proMod parameter t...
HighCVSS 7.5
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (1) proMod parameter to (a) index.php, or the (2) docroot parameter to (b) index.php or (c) mainpage.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| profitcode ppalcart | = 2.5_ee | No fix listed |
References
- 21868 third-party-advisory vendor-advisory
- 20060910 PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities mailing-list
- 20060914 ppalCart V(2.5 EE) Remote File Inclusion mailing-list
- 19881 exploit vdb-entry
- ADV-2006-3557 vdb-entry vendor-advisory
- ppalcart-index-file-include(28781) vdb-entry
- 2316 exploit