CVE-2006-2483

CVE-2006-2483 describes a remote file inclusion vulnerability in Squirrelcart 2.2.2 and earlier, specifically within the cart_content.php script. Attackers can exploit this by injecting a malicious URL into the cart_isp_root parameter, leading to the execution of arbitrary PHP code on the affected server. This vulnerability has a CVSS score of 6.4, indicating a medium severity with low attack complexity and no authentication required, potentially resulting in partial confidentiality and integrity compromise. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.