A vulnerability has been found in Valdersoft Shopping Cart up to 3.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument commonIncludePath leads to file inclusion.
This vulnerability is known as CVE-2006-6691. The attack can be launched remotely. Furthermore, there is an exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2006-6691 | Valdersoft Shopping Cart up to 3.0 commonIncludePath file inclusion (XFDB-30984 / BID-21685)
A vulnerability has been found in Valdersoft Shopping Cart up to 3.0 and classified as critical. Affected by this vulnerability is an unknown functionality.…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Workaround & Virtual-Patching empfohlen
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Öffentliche PoCs existieren. Isolieren Sie das System oder wenden Sie Micro-Segmentierungsregeln an, bis offizielle Patches vorliegen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.vupen.com
-
Web Referencewww.securityfocus.com
-
Web Referencesecunia.com
-
Web Referenceexchange.xforce.ibmcloud.com
1 öffentliche Exploit-Referenz(en) detektiert (Exploit Database (EDB)).
PoC einsehen