CVE-2004-2010

PHP remote file inclusion in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by setting base_dir to a URL on a remote server that serves phpshop.cfg. This affects index.php. The underlying root cause is a file inclusion weakness that trusts a user-controlled base_d...

CVE-2004-2010

PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the basedir parameter to reference a URL on a remote web server that contains phpshop.cfg...