Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On my friends website when I typed existing page, I got page not found error.But when I gave I got blank white page.So is this website vulnerable to RFI? Why did it show blank page instead of error page?

share|improve this question
This cannot be answered unless we know the source code of the application which handles this URL. – Lucas Kauffman Sep 13 '13 at 5:49
Hey! What do you have against I like my news! – NULLZ Sep 13 '13 at 6:33
check the error-logs, if you have some. – that guy from over there Sep 13 '13 at 6:44
up vote 3 down vote accepted

Generally if you're looking to test for RFI the way to approach it is to place a URL that you have control over as the parameter. That way then the URL is accessed you can look in the web server logs to see if you had a request from the server your assessing for that page.

As to whether this website is vulnerable, to be honest it's not possible to tell definitively from the information at hand.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.