CVE-2007-3081 PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comdev ecommerce | = 4.1 | No fix listed |
References
- 38362 vdb-entry
- 2779 third-party-advisory
- 20070603 Comdev eCommerce 4.1 RFI Vulnerability mailing-list
- ecommerce-sampleecommerce-file-include(34704) vdb-entry