464 matches found
CVE-2002-2167
The CVE-2002-2167 issue affects Thorsten Korner’s 123tkShop prior to version 0.3.1. A directory traversal flaw exists in function_foot_1.inc.php: a crafted designNo value can terminate with a null character, enabling remote attackers to read arbitrary files via include() calls. Impact is read acc...
CVE-2002-2168: Undefined Security Weakness
SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including functiondescribeitem1.inc.php...
CVE-2002-2167
Directory traversal vulnerability in functionfoot1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. dot dot sequences terminated by a null character in the $designNo variable, which is part of an "include" function call...