CVE-2006-1684

CVE-2006-1684 affects ecotwo Shopsystem 1.0-192 and earlier. The vulnerability allows remote attackers to include arbitrary local files via the lang parameter in news.php and other unspecified vectors, enabling local file inclusion. The NVD entry lists a (Network) attack vector with low complexit...