Freewebshop » Freewebshop : Security Vulnerabilities, CVEs, (Directory traversal)
Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_file parameter.
Max CVSS
6.8
EPSS Score
0.81%
Published
2009-07-07
Updated
2017-09-19
Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773.
Max CVSS
6.4
EPSS Score
1.11%
Published
2006-11-10
Updated
2017-07-20
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter.
Max CVSS
5.0
EPSS Score
0.55%
Published
2006-11-06
Updated
2017-10-19
3 vulnerabilities found