Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6941. PoCs published by Spiked.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in FreeWebShop 2.2.x, including SQL injection for authentication bypass, file disclosure, and arbitrary file creation leading to remote code execution. It provides clear, functional payloads for each attack vector.
Description
index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in FreeWebShop 2.2.x, including SQL injection for authentication bypass, file disclosure, and arbitrary file creation leading to remote code execution. It provides clear, functional payloads for each attack vector.