VulnerabilityModified
CVE-2006-5773
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a ..
MEDIUM 5.0EPSS 7.75%
Does this matter?
Lower severity and a low EPSS score (7.75%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 7.75% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- freewebshop/freewebshop
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22664Vendor Advisory
- http://www.freewebshop.org/index.php?id=27
- http://www.securityfocus.com/bid/20888Exploit
- http://www.vupen.com/english/advisories/2006/4332
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29991
- https://www.exploit-db.com/exploits/2704
- http://secunia.com/advisories/22664Vendor Advisory
- http://www.freewebshop.org/index.php?id=27
- http://www.securityfocus.com/bid/20888Exploit
- http://www.vupen.com/english/advisories/2006/4332
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29991
- https://www.exploit-db.com/exploits/2704
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.