Squirrelcart: PHP code inclusion attempt


Description   Using the cart_content.php and a specially crafted cart_isp_root parameter, an attacker could include and execute arbitrary PHP code on the server.
     
Default
configuration
 
Profiles High Medium Low Internet
Action Block Block Block Block
Alarm Level Major Minor Minor Major
     
References   URL: http://www.frsirt.com/english/advisories/2006/1818
     
Available since   ASQ v3.2.0
     
Protects   Squirrelcart "cart_isp_root" Variable Handling Remote File Inclusion Vulnerability
100 last CVE   CVE-2006-2483


 
 
 
 
 Risk level 
Moderate