GCVE - cpe:2.3:a:freewebshop:freewebshop:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freewebshop:freewebshop:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Freewebshop (`884151e5-d026-5a02-b098-0fb7d5e16438`)
Product	Freewebshop (`87007b9f-41aa-58ef-a409-49449d92c863`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/freewebshop`	purl2cpe	2026-06-01 10:15:22.115111

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6941`	vulnerable	2026-06-08 04:49:29.983223	Details available index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message. Published: 2007-01-19T00:00:00.000Z Updated: 2024-08-07T20:42:07.716Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/2704 http://www.freewebshop.org/?id=27	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5847`	vulnerable	2026-06-08 04:49:21.431700	Details available Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Published: 2006-11-10T02:00:00.000Z Updated: 2024-08-07T20:04:55.681Z Open on db.gcve.eu Reference links http://secunia.com/advisories/22786 http://www.securityfocus.com/bid/20969 http://www.vupen.com/english/advisories/2006/4420 http://www.freewebshop.org/?id=28 https://exchange.xforce.ibmcloud.com/vulnerabilities/30126	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5846`	vulnerable	2026-06-08 04:49:21.431326	Details available Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773. Published: 2006-11-10T02:00:00.000Z Updated: 2024-08-07T20:04:55.761Z Open on db.gcve.eu Reference links http://secunia.com/advisories/22786 http://www.securityfocus.com/bid/20969 http://www.vupen.com/english/advisories/2006/4420 https://exchange.xforce.ibmcloud.com/vulnerabilities/30125 http://marc.info/?l=bugtraq&m=116303405916694&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5773`	vulnerable	2026-06-08 04:49:21.277036	Details available Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter. Published: 2006-11-06T23:00:00.000Z Updated: 2024-08-07T20:04:55.575Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4332 http://www.freewebshop.org/index.php?id=27 https://www.exploit-db.com/exploits/2704 https://exchange.xforce.ibmcloud.com/vulnerabilities/29991 http://www.securityfocus.com/bid/20888	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5772`	vulnerable	2026-06-08 04:49:21.276630	Details available Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) prod parameter. Published: 2006-11-06T23:00:00.000Z Updated: 2024-08-07T20:04:55.577Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4332 http://www.freewebshop.org/index.php?id=27 https://www.exploit-db.com/exploits/2704 http://secunia.com/advisories/22664 https://exchange.xforce.ibmcloud.com/vulnerabilities/29990	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Freewebshop

Notes

PURL mappings

Vulnerability references

Contribute