• info
• discussion
• exploit
• solution
• references

Exhibit Engine Photo_Comment.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

An example proof of concept is included.

• /data/vulnerabilities/exploits/exhibit_engine_rfi.txt