Unscored severity · published Sep 25, 2006
CVE-2006-4969
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1)…
–
CVSS
12.3%
EPSS
No
On KEV
Description
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Pie Cart Pro · Wahm E-commerce
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4969
secunia.com
http://secunia.com/advisories/22131
www.osvdb.org
http://www.osvdb.org/29198
www.osvdb.org
http://www.osvdb.org/29199
www.osvdb.org
http://www.osvdb.org/29200
www.osvdb.org
http://www.osvdb.org/29201
www.osvdb.org
http://www.osvdb.org/29202
More from Pie Cart Pro
–
CVE-2006-4970
PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the Home_Path…