Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-5299. PoCs published by SnIpEr_SA.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in SkaDate Online Dating Software versions 5.0 and 6.0, allowing remote file disclosure via manipulated 'view_mode' parameters in featured_list.php and online_list.php.
Description
Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode parameter to (1) featured_list.php and (2) online_list.php in member/.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in SkaDate Online Dating Software versions 5.0 and 6.0, allowing remote file disclosure via manipulated 'view_mode' parameters in featured_list.php and online_list.php.