CVE-2010-0957 Information

Description

Directory traversal vulnerability in content.php in Saskia’s Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.

Reference

http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt http://www.exploit-db.com/exploits/11433 http://www.securityfocus.com/bid/38574 https://exchange.xforce.ibmcloud.com/vulnerabilities/56358