Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1126. PoCs published by laurent gaffie.
AI-analyzed exploit summary This exploit demonstrates a local file inclusion vulnerability in xt:Commerce due to improper input sanitization. The PoC shows how an attacker can read arbitrary files (e.g., /etc/passwd) by manipulating the 'template' parameter.
Description
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.
Exploits (1)
This exploit demonstrates a local file inclusion vulnerability in xt:Commerce due to improper input sanitization. The PoC shows how an attacker can read arbitrary files (e.g., /etc/passwd) by manipulating the 'template' parameter.