Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4369. PoCs published by dun.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in SOTEeSKLEP, allowing unauthorized file disclosure by manipulating the 'file' parameter. The vulnerability arises from insufficient input validation, enabling attackers to access files outside the intended directory.
Description
Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in SOTEeSKLEP, allowing unauthorized file disclosure by manipulating the 'file' parameter. The vulnerability arises from insufficient input validation, enabling attackers to access files outside the intended directory.