CVE-2006-4062
MEDIUM 5.1EPSS 3.8%
PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter.
- CVSS v2.0 NVD
- 5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P - EPSS
- 3.85% chance of exploitation in the next 30 days, 90th percentile
- Published
- 2006-08-10
- Updated
- 2024-08-07