CVE-2006-3375

CVE-2006-3375 affects Randshop 1.1.1, where a PHP remote file inclusion flaw exists in includes/header.inc.php. The vulnerability, triggered via the dateiPfad parameter, allows remote attackers to execute arbitrary PHP code on the affected system. The root cause is a mis-validated parameter used ...