CVE-2007-1855

CVE-2007-1855 describes multiple PHP remote file inclusion vulnerabilities in Shop-Script FREE, specifically in smarty/smarty_class.php, enabling an attacker to execute arbitrary PHP code by supplying a URL to one of five parameters (_smarty_compile_path, smarty_compile_path, get_plugin_filepath,...

CVE-2007-1855: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in smarty/smartyclass.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a URL in the 1 smartycompilepath, 2 smartycompilepath, 3 getpluginfilepath, 4 smartydir, and 5 filename parameters. NOTE: this issue might be...

ssfree-rfi.txt

By Hasadya Raed Contact : [email protected] Israel ----------------------------------------- Script : Shop-SCRIPT FREE Dork : "Copyright c 2004 Articus consulting group. All rights reserved" ----------------------------------------- B.Files : smartyclass.php ---------------------------------------...