CVE-2006-6691: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the commonIncludePath parameter to 1 admin/include/common.php, 2 include/common.php, or 3 commoninclude/common.php...