CVE:CVE-2006-6691
CNNVD:CNNVD-200612-474
Valdersoft Shopping Cart 3.0及之前版本存在多个PHP远程文件包含漏洞。远程攻击者可以借助传给(1)admin/include/common.php，(2)include/common.php或(3)common_include/common.php中的commonIncludePath参数当中的URL，执行任意PHP代码。
solution:Upgrade valdersoft shopping_cart to a higher version than 3.0,and avoid the version 3.0