cbcvebase.

Cpcommerce Project Cpcommerce vulnerabilities

1 known vulnerability affecting cpcommerce_project/cpcommerce.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2009-1936P2CRITICALCVSS 9.8PoC≥ 1.2.0, ≤ 1.2.92009-06-05
CVE-2009-1936 [CRITICAL] CVE-2009-1936: _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit whe _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector
nvd
Cpcommerce Project Cpcommerce vulnerabilities | cvebase