PHP LFI to Arbitrary Code Execution via rfc1867 File Upload Temporary Files

[Nytro]

PHP LFI to Arbitrary Code Execution via rfc1867 File Upload Temporary Files

by Gynvael Coldwind

18 March 2011

Prologue

This article describes a method of taking advantage of a .php script Local File

Inclusion vulnerability. It does not describe any vulnerability in the PHP engine

itself, nor does it describe any new vulnerability class.

Download:

http://www.exploit-db.com/download_pdf/17010

L-am citit, e scurt dar prezinta o idee interesanta. Vi-l recomand.