Vulnerabilities > CVE-2006-3537 - Remote File Include vulnerability in Randshop 0.9.3

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
randshop
NVD
Published: 2006-07-12
Updated: 2018-10-18

Summary

PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter, a different vector than CVE-2006-3375. This vulnerability is addressed in the following product release: Randshop, Randshop, 1.2

Vulnerable Configurations

Part Description Count
Application
Randshop
2

References