Vulnerabilities > CVE-2006-7099 - Local File Include vulnerability in Solarpay .

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
solarpay
exploit available
NVD
Published: 2007-03-03
Updated: 2008-11-15

Summary

Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot dot) in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Configurations

Part Description Count
Application
Solarpay
1

Exploit-Db

descriptionSolarPay Index.PHP Local File Include Vulnerability. CVE-2006-7099. Webapps exploit for php platform
idEDB-ID:29663
last seen2016-02-03
modified2007-02-26
published2007-02-26
reporterHasadya Raed
sourcehttps://www.exploit-db.com/download/29663/
titleSolarPay Index.PHP Local File Include Vulnerability

References