Re: LFI On SMF 1.1.3

看板Bugtraq作者時間18年前 (2007/09/25 23:33), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串4/4 (看更多)
This is not LFI because $actionArray is constant predefined array and value for $_REQUEST['action'] is filtred before line 334.
文章代碼(AID): #16-IfH00 (Bugtraq)
文章代碼(AID): #16-IfH00 (Bugtraq)