CVE-2006-5101 | Comdev eCommerce include.php path[docroot] privileges management (XFDB-29220 / BID-20566)
A vulnerability categorized as critical has been discovered in Comdev eCommerce. Impacted is an unknown function of the file include.php. Executing a manipulation of the argument path[docroot] can lead to improper privilege management.
The identification of this vulnerability is CVE-2006-5101. The attack may be launched remotely. Furthermore, there is an exploit available.