Vulnerabilities > CVE-2006-1707 - Remote Security vulnerability in Shopweezle

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
kansok-communications

Summary

index.php in Shopweezle 2.0 allows remote attackers to include arbitrary local files via the url parameter.