cbcvebase.
CVE-2006-5846
published 2006-11-10

CVE-2006-5846: Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot)…

PriorityP337medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EXPLOIT
EPSS
11.78%
95.6th percentile
Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773.

Affected

1 ranges
VendorProductVersion rangeFixed in
freewebshopfreewebshop<= 2.2.2—
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.