Magentech Rozy Flower Shop Theme Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the Magentech Rozy - Flower Shop theme, specifically in versions through 1.2.25. This vulnerability arises from improper control of filenames in include or require statements within the PHP program, allowing for remote file inclusion.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing an attacker to include files from the local server into the application, potentially leading to code execution or disclosure of sensitive information.