• info
• discussion
• exploit
• solution
• references

SportsPHool Remote File Include Vulnerability

Attackers can exploit this issue using a web client.

The following proof-of-concept script is available:

• /data/vulnerabilities/exploits/SportsPHool_v1.0_rfi_poc.txt