FreeWebshop is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. FreeWebshop 2.2.9 R2 is vulnerable prior versions may also be affected.

• http://www.freewebshop.org
• http://www.securityfocus.com/bid/50694

---

Updated on 2015-03-25