CVE-2007-6133

Published: Nov 27, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfm_base_path parameter.

Affected (1)

Products: Devmass: Devmass Cart

Devmass

1 product

Devmass Cart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Devmass Devmass Cart	Version 1.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://osvdb.org/38809

Source: cve@mitre.org

http://secunia.com/advisories/27765

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/26538

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3981

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/38609

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4642

Source: cve@mitre.org

http://osvdb.org/38809