CVE-2006-5847

MEDIUM

freewebshop < 2.2.2 - Cross-Site Scripting via cat Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5847. PoCs published by laurent gaffie.

AI-analyzed exploit summary The provided text describes a vulnerability in FreeWebShop 2.2 and prior versions, specifically mentioning XSS and local file inclusion issues. It includes a sample URL demonstrating the XSS vulnerability but lacks executable exploit code.

Description

Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by laurent gaffie · textwebappsphp

https://www.exploit-db.com/exploits/28943

View Code ZIP pw:eip

The provided text describes a vulnerability in FreeWebShop 2.2 and prior versions, specifically mentioning XSS and local file inclusion issues. It includes a sample URL demonstrating the XSS vulnerability but lacks executable exploit code.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: FreeWebShop 2.2 and prior

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK