[dst]

Edit:

Hey guys,

I have an url : http://thewebsite.com/index.php?page=<inject here>
It's a LFI injection with NULL Byte %00 at the end.

For example:
http://thewebsite.com/index.php?page=/www/upload.php%00
Output >> the form has been display.

I read that when you upload a file to server, the server store it into a tmp directory which is /www/tmp/

But i'm not allowed to upload .php file and I have already tried these types of injections.
Can I run a script file which is located in /www/tmp ?

Have you any idea, not the solution ?
Thanks

[mindfork]

I read this like 5 times now still don't get what you're trying to say. You should fix your english if you want to get help.

[Teferi]

I read this like 5 times now still don't get what you're trying to say. You should fix your english if you want to get help.

Peanuts, definitely something about peanuts.