medium5.0Public exploit code
CVE-2006-6941
index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities2006-11-02 · webapps · php · Verified
Impact
index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freewebshop | Freewebshop | through 2.2.2 |