CVE Vulnerabilities

CVE-2006-1684

Published: Apr 11, 2006 | Modified: Nov 03, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local files via (1) the lang parameter in news.php and (2) other unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Shopsystem Ecotwo 1.0_192 (including) 1.0_192 (including)

References