[VIM] true: R2K Gallery LFI

Steven M. Christey coley at mitre.org
Sun May 13 22:31:45 UTC 2007


Researcher: Dj7xpl
Ref: http://www.milw0rm.com/exploits/3902

Specified download is from February 2003.

from galeria.php:

  if($lang2=="") //CHOOSE BETWEEN spanish, french or english Default english
    {$lang2="spanish";} 
  else
    {}
  //PHP GALERY
  include ("lang/".$lang2.".lang");


- Steve


More information about the VIM mailing list