CVE-2010-0957

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter...

Directory traversal

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter...

CVE-2010-0957

Summary (CVE-2010-0957): A directory traversal vulnerability in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter. This affects Saskia's Shopsystem legacy versions and can lead to partia...

CVE-2010-0957

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter...

CVE-2010-0957: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter...

Saskia's ShopSystem - 'id' Local File Inclusion

source: https://www.securityfocus.com/bid/38574/info Saskia's Shopsystem is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local...

Saskia's Shopsystem Local File Inclusion

Saskia's Shopsystem Download: http://sourceforge.net/projects/saskiasshop/files/ Date: 13.02.2010 Remote: yes Vuln : include"include/".$id.".php"; PoC : Saskiapath/content.php?id=LFI%00 GreetZ : myself...

Saskia's Shopsystem <= beta1 Local File Include Exploit

Exploit for unknown platform in category web applications ======================================================= Saskia's Shopsystem Download: http://sourceforge.net/projects/saskiasshop/files/ Date: 13.02.2010 Remote: yes Vuln : include"include/".$id.".php"; PoC : Saskiapath/content.php?id=LFI%...