CVE-2006-4062: Dmitry Sheiko Sapid Shop

Medium severity, CVSS 5.1. EPSS: 3.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter.

Affected products

• Dmitry Sheiko Sapid Shop: up to and including 1.2

Published 2006-08-10. Last modified 2026-06-16.