CVE-2006-5923

Description

PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the custom parameter.

Affected products

• chris_mac / gimescripts_shopping_catalog0.9.1

References

• MISChttp://www.securityfocus.com/bid/20979
• MISChttp://www.securityfocus.com/archive/1/452114/100/200/threaded
• EXPLOIThttps://www.exploit-db.com/exploits/2745