Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-7099. PoCs published by Hasadya Raed.
AI-analyzed exploit summary The provided text describes a local file inclusion vulnerability in SolarPay, where unsanitized user input allows attackers to access restricted files. The example URL demonstrates path traversal to access an admin file.
Description
Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot dot) in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
The provided text describes a local file inclusion vulnerability in SolarPay, where unsanitized user input allows attackers to access restricted files. The example URL demonstrates path traversal to access an admin file.