CVEvulnerability
CVE-2006-4969
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-09-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php.
Affected configurations
• wahm e-commerce pie cart pro
References
- http://secunia.com/advisories/22131 secunia.com
- http://www.osvdb.org/29198 www.osvdb.org
- http://www.osvdb.org/29199 www.osvdb.org
- http://www.osvdb.org/29200 www.osvdb.org
- http://www.osvdb.org/29201 www.osvdb.org
- http://www.osvdb.org/29202 www.osvdb.org
- http://www.osvdb.org/29203 www.osvdb.org
- http://www.osvdb.org/29204 www.osvdb.org
- http://www.osvdb.org/29205 www.osvdb.org
- http://www.osvdb.org/29206 www.osvdb.org
- http://www.osvdb.org/29207 www.osvdb.org
- http://www.osvdb.org/29208 www.osvdb.org
- http://www.osvdb.org/29209 www.osvdb.org
- http://www.osvdb.org/29210 www.osvdb.org
- http://www.osvdb.org/29211 www.osvdb.org
- http://www.osvdb.org/29212 www.osvdb.org
- http://www.osvdb.org/29213 www.osvdb.org
- http://www.osvdb.org/29214 www.osvdb.org
- http://www.securityfocus.com/bid/20099 Exploit
- http://www.vupen.com/english/advisories/2006/3798 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29023 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2393 www.exploit-db.com
- http://secunia.com/advisories/22131 secunia.com
- http://www.osvdb.org/29198 www.osvdb.org
- http://www.osvdb.org/29199 www.osvdb.org
- http://www.osvdb.org/29200 www.osvdb.org
- http://www.osvdb.org/29201 www.osvdb.org
- http://www.osvdb.org/29202 www.osvdb.org
- http://www.osvdb.org/29203 www.osvdb.org
- http://www.osvdb.org/29204 www.osvdb.org
- http://www.osvdb.org/29205 www.osvdb.org
- http://www.osvdb.org/29206 www.osvdb.org
- http://www.osvdb.org/29207 www.osvdb.org
- http://www.osvdb.org/29208 www.osvdb.org
- http://www.osvdb.org/29209 www.osvdb.org
- http://www.osvdb.org/29210 www.osvdb.org
- http://www.osvdb.org/29211 www.osvdb.org
- http://www.osvdb.org/29212 www.osvdb.org
- http://www.osvdb.org/29213 www.osvdb.org
- http://www.osvdb.org/29214 www.osvdb.org
- http://www.securityfocus.com/bid/20099 Exploit
- http://www.vupen.com/english/advisories/2006/3798 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29023 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2393 www.exploit-db.com