Forum Discussion
Solved
Letter to Santa Entry access?
can anyone hint on how to get into letter.php .. i tried every kind of lfi possible and not able to get access to the letter service.. when ever i try just gets printed as is.
Hey webbug2005 you must go with SSI in Apache
<!--#exec cmd="command you want to execute" -- >
Hi webbug2005
Right, any text you enter gets echoed back as a summary. My first instinct was to check what happens with HTML tags. Right away some success there, but what can I do with that? Can something like an image or iframe tag read files from the file system? Next, I googled around for something that can include a file. Found some docs about some old feature. Even executing commands seems possible…
