TI-2006-01630 CVE-2006-1684 · GHSA-67cp-pmgm-8qqmUnspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote…Priority LOW 25Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local files via (1) the lang parameter in news.php and (2) other unspecified vectors.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01053 · Published 2006-04-10 · No fix listed