• info
• discussion
• exploit
• solution
• references

phpFreeLog log.php Local File Include Vulnerability

phpFreeLog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the webserver process.

This issue affects phpFreeLog alpha 0.2.0; other versions may also be vulnerable.