← Database

CVE-2006-5846

MEDIUM CVSS: 6.4 Published: 2006-11-10 Modified: 2026-06-16

Description

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773.

Affected Platforms

Freewebshop Freewebshop

Weakness Type

CWE-22

References