CVE-2006-4904

Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables…

published September 21, 2006

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07085 · 94.2th percentile
Published
2006-09-21T00:00Z
EPSS history
Timeline
  • 21 SEP 00:00Z
    Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables…
    cvelistv5