Vulnerability Details CVE-2010-0957
Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 66.4%
CVSS Severity
CVSS v2 Score 6.8
References
- http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt
- http://www.exploit-db.com/exploits/11433
- http://www.securityfocus.com/bid/38574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56358
- http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt
- http://www.exploit-db.com/exploits/11433
- http://www.securityfocus.com/bid/38574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56358
Products affected by CVE-2010-0957
-
cpe:2.3:a:saskia_bruckner:saskias_shopsystem:*