CVE-2007-2559 Information

Description

Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php (2) checkout.php and (3) libsecure.php.

Reference

http://osvdb.org/36170 http://osvdb.org/36171 http://osvdb.org/36172 http://securityreason.com/securityalert/2681 http://www.securityfocus.com/archive/1/467840/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/34165