CVE-2011-4543

CVE-2011-4543 describes multiple directory traversal vulnerabilities in osCommerce 3.0.2. These flaws allow remote attackers to include and execute arbitrary local files by manipulating various parameters (e.g., 'set', 'module', 'filter', 'template') with directory traversal sequences (../). The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or Nuclei, or significant community discussion or media coverage surrounding this CVE.