5.0med
CVE-2006-69411 exploit
index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an in…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.5%
percentile 85%
Public exploits
1
Exploit-DB
Summary
index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message.
Exploit prediction (EPSS)
2.48% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.
Exploits and detections
- EDB-2704 FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities · webapps · 2006-11-02
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- exploit-db.com /exploits/2704 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- freewebshop.org /?id=27 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2006-6941
- NVD: CVE-2006-6941
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.