MallBuilder v5.8 smarty_config.php 参数key SQL注入漏洞

No description provided by source...

CVE-2006-7069

The CVE-2006-7069 entry documents a PHP remote file inclusion in smarty_config.php within Socketwiz Bookmarks 2.0 and earlier. The vulnerability arises from accepting user-controlled input via the root_dir parameter, enabling an attacker to execute arbitrary PHP code remotely. The referenced NVD ...

CVE-2006-7069: Undefined Security Weakness

PHP remote file inclusion vulnerability in smartyconfig.php in Socketwiz Bookmarks 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the rootdir parameter...