CVEvulnerability
CVE-2010-0957
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.
Affected configurations
• saskia bruckner saskias shopsystem (<= beta1)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt Exploit
- http://www.exploit-db.com/exploits/11433 www.exploit-db.com
- http://www.securityfocus.com/bid/38574 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56358 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt Exploit
- http://www.exploit-db.com/exploits/11433 www.exploit-db.com
- http://www.securityfocus.com/bid/38574 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56358 exchange.xforce.ibmcloud.com