CVE-2006-5846

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. dot dot in the page parameter, a different vector than CVE-2006-5773...

CVE-2006-5846

CVE-2006-5846 affects FreeWebshop 2.2.2 and earlier (index.php). The underlying issue is a directory traversal flaw that allows a remote attacker to read and include arbitrary files by manipulating the page parameter (via ..), a vector distinct from CVE-2006-5773. Impact is read/access of arbitra...