PT-2017-7555

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary PHP code via a URL in the file path parameter to "upload/admin2". This is a result of a PHP remote file inclusion vulnerability in the get file...