Re: Simple PHP scanning ..

Ulf Harnhammar wrote:
> include("templatedir/$file");

with this you can do

file=../../../../../../../../../../../../../etc/passwd

directory traversal and get any (readable) file from the server.

Not the same vulnerability, but a vulnerability :)

Bye
 Gerardo