All Questions
Tagged with file-inclusion vulnerability
2 questions
5
votes
1
answer
4k
views
What is the difference between local file inclusion (LFI) and remote file inclusion (RFI)?
Based on this previous question, it seems like the difference between directory traversal and file inclusion is as follows:
Directory traversal
Improper validation of user input leads to read ...
- 153
1
vote
3
answers
24k
views
Local File Inclusion to RCE using PHP File Wrappers
Suppose we have code that looks something like this:
<?php include("includes/".$_GET['param1'].".php");?>
Now the above code is vulnerable to LFI. If I pass payload ../../../../etc/passwd%00it ...
- 11