EDB-1872

functional

CS-Cart 1.3.3 - 'classes_dir' Remote File Inclusion

view exploit source exploit_dbverifiedtype webappsauthor Kacperpublished 2006-06-03catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-2863USmedium5.1Exploit
PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classes_dir parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan