• info
• discussion
• exploit
• solution
• references

DreamAccount Auth.api.PHP Remote File Include Vulnerability

An exploit is not required.

A proof of concept has been provided:

• /data/vulnerabilities/exploits/DreamAccount_auth.api.php.pl