PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote malicious users to execute arbitrary PHP code via the (1) _saz[settings][shippingfolder] and (2) _saz[settings][taxfolder] parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
sazcart sazcart 1.5 |