CVE-2006-4121

CVE-2006-4121 describes a PHP remote file inclusion in See-Commerce 1.0.625 and earlier. The flaw is in owimg.php3 and allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Affected software: See-Commerce (version 1.0.625 and earlier). Underlying cause: unvalidate...

See-Commerce 1.0.625 - owimg.php3 Remote File Inclusion

See-Commerce 1.0.625 - owimg.php3 Remote File Inclusion See-Commerce Remote File Inclusion CreW: ToXiC Bug Found by Drago84 Source Code: http://freshmeat.net/redir/seecommerce/14016/urlzip/sc-1.0.625.zip Problem Is: require$path."/ow.inc"; Page Affect: http://site/see-commerce...