This is a writeup describing a local file inclusion (LFI) vulnerability in phpCOIN 1.2.1. The vulnerability allows an attacker to include arbitrary local files, such as /proc/self/environ, by manipulating the 'mod' parameter in the URL.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:phpCOIN 1.2.1
No auth needed
Prerequisites:Access to the target web application