CVE-2006-5773
freewebshop < 2.2.1 - Directory Traversal via Action Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5773. PoCs published by Spiked.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in FreeWebShop 2.2.x, including SQL injection for authentication bypass, file disclosure, and arbitrary file creation leading to remote code execution. It provides clear, functional payloads for each attack vector.
Description
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in FreeWebShop 2.2.x, including SQL injection for authentication bypass, file disclosure, and arbitrary file creation leading to remote code execution. It provides clear, functional payloads for each attack vector.