Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5846. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes a local file inclusion (LFI) vulnerability in FreeWebShop 2.2 and prior versions, allowing an attacker to read arbitrary files via path traversal. The example URL demonstrates accessing '/etc/passwd' through the 'page' parameter.
Description
Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773.
Exploits (1)
The provided text describes a local file inclusion (LFI) vulnerability in FreeWebShop 2.2 and prior versions, allowing an attacker to read arbitrary files via path traversal. The example URL demonstrates accessing '/etc/passwd' through the 'page' parameter.