CVE-2006-6941

published 2007-01-19

CVE-2006-6941: index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which…

Priority P4 11 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

EXPLOIT

index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
freewebshop	freewebshop	<= 2.2.2	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.