This is a detailed writeup describing a Local/Remote File Inclusion vulnerability in webERP <= 4.08.1. It explains how the vulnerability can be exploited via path traversal or RFI using FTP/HTTP wrappers, but does not include executable exploit code.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Theoretical
Target:webERP <= 4.08.1
No auth needed
Prerequisites:magic_quotes_gpc = Off for LFI · allow_url_fopen = On and allow_url_include = On for RFI · register_globals = On for RFI