CVE-2003-1500

CVE-2003-1500 : PHP remote file inclusion in cpCommerce 0.5f’s _functions.php allows remote attackers to execute arbitrary code via the prefix parameter. The vulnerability is caused by insufficient validation in the function handling the prefix, enabling RFI and potential code execution. Public r...