CVE-2006-5846

2006-11-1002:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.6%

JSON

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a … (dot dot) in the page parameter, a different vector than CVE-2006-5773.

References

marc.info/?l=bugtraq&m=116303405916694&w=2

secunia.com/advisories/22786

securitytracker.com/id?1017200

www.freewebshop.org/?id=28

www.freewebshop.org/index.php?id=28

www.securityfocus.com/bid/20969

www.vupen.com/english/advisories/2006/4420

exchange.xforce.ibmcloud.com/vulnerabilities/30125