-
`download.php` seems vulnerable to a local file inclusion attack because of non-proper validation of the `$_GET["token"]` user input.
(Only came across this, because it had a lot of likes on Twitter a…
-
In `index.php` on line 12:
```
```
`body` is used without any input validation. This can lead to a local file inclusion vulnerability. For more information about LFI and remediation look [here.](…
-
In `navigation.php` on line 4:
```
include($_GET['content'].".php");
```
there is a local file inclusion vulnerability. `content` is not sanitized and by using a null byte character can be used to i…
-
### What happened + What you expected to happen
**Description**
Just as the title suggests, when initially starting up the Ray dashboard I can parse my local file system by supplying the `folder` …
-
**Is your feature request related to a problem? Please describe.**
Currently, we have 2 levels for LFI vulnerability but because it is a very common vulnerability and has a lot of variants hence, it …
-
Be careful about exposing this to the internet
```
$ curl --path-as-is -i -s -k "http://public-ip:9966/../../../../../../../../../../../../../../../../etc/passwd"
HTTP/1.1 200 OK
content-type: a…
-
We know https://unblockvideos.com/ using php-proxy script.
im trying to put file:///etc/passwd on "url". but it's contain error :
Could not resolve host : file
i think this is a filter/waf. and the…
-
-
An easier format would be:
```
FROM nixyslab/nxs-backup-bin AS bin
FROM mariadb:10.11
COPY --from=bin /nxs-backup /usr/local/bin/nxs-backup
CMD nxs-backup start
```
When starting the co…
-
Some projects are a hairy mess of file inclusions. It happens, and there's not much we can do about it after some time.
The consequence of this is that, after resolving all the inclusions (imagine …