CVE-2007-6133

CVE-2007-6133 : A PHP remote file inclusion vulnerability in DevMass Shopping Cart 1.0 and earlier allows an attacker to execute arbitrary PHP code via the kfm_base_path parameter in admin/kfm/initialise.php. The root cause is inclusion of remote files through a user-controlled URL, enabling arbi...