What’s Vulnerable › Vulnerabilities

CVE-2010-0957

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-03-10 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.

Affected products

• Saskia Bruckner Saskias Shopsystem: through beta1

References

• http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt
• http://www.exploit-db.com/exploits/11433
• http://www.securityfocus.com/bid/38574
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56358
• http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt
• http://www.exploit-db.com/exploits/11433
• http://www.securityfocus.com/bid/38574
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56358

Get alerted when CVE-2010-0957 or the next vulnerability affects your stack