CVE-2007-4439

CVE-2007-4439 describes a PHP remote file inclusion in popup_window.php for Squirrelcart 1.x.x and earlier. The issue arises when an attacker supplies a URL in the site_isp_root parameter (likely related to cart.php), allowing execution of arbitrary PHP code on affected systems. Affected software...