CVE-2007-0230
** DISPUTED ** PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use.
Date published : 2007-01-12
http://www.securityfocus.com/archive/1/456527/100/0/threaded