Back

CVE-2006-0099

PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter.

Published: Jan 6, 2006 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
valdersoft valdersoft_shopping_cart 3.0

GitHub Security Advisory GHSA-pj42-2qcf-vpxw

PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2)...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 4.41%

Top 9% most likely to be exploited

Threat Score 31.3 / 100

Data Sources

NVD EPSS GitHub