CVE-2006-4904: Undefined Security Weakness

Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcartdir parameter...

[SA22005] Qualiteam X-Cart cmpi.php Variable Overwriting Vulnerability

TITLE: Qualiteam X-Cart cmpi.php Variable Overwriting Vulnerability SECUNIA ADVISORY ID: SA22005 VERIFY ADVISORY: http://secunia.com/advisories/22005/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Qualiteam X-Cart Pro 4.x http://secunia.com/product/11995/ Qualiteam...