CVE-2009-1936
_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2009-06-05
- Last modified
- 2025-01-21
- Weaknesses
- CWE-22
Affected products
References
- http://secunia.com/advisories/35245
- http://www.securityfocus.com/bid/35103
- https://www.exploit-db.com/exploits/8790
