CVE-2006-4062

CVE-2006-4062 affects Dmitry Sheiko SAPID Shop 1.2 and earlier. The vulnerability is a PHP remote file inclusion in usr/extensions/get_tree.inc.php that allows an attacker to execute arbitrary PHP code via a URL supplied to GLOBALS[root_path]. The provided documents identify the vulnerable compon...