Freewebshop » Freewebshop : Security Vulnerabilities, CVEs, Published In 2006 (Directory traversal)
Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773.
Max CVSS
6.4
EPSS Score
1.11%
Published
2006-11-10
Updated
2017-07-20
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter.
Max CVSS
5.0
EPSS Score
0.55%
Published
2006-11-06
Updated
2017-10-19
2 vulnerabilities found