search

xIFAILx / fotosjaak

0 stars 0 forks source link

Local file inclusion vulnerability #1

Open themcaffee opened 9 years ago

themcaffee commented 9 years ago

In navigation.php on line 4:

include($_GET['content'].".php");

there is a local file inclusion vulnerability. content is not sanitized and by using a null byte character can be used to include any file on the server. More information

xIFAILx commented 9 years ago

thanks for taking your time to look through the code and stuff, but it's just an old class project i'm not going to work on any longer