PrepAway - Latest Free Exam Questions & Answers

Category: ZF-100-500

Exam ZF-100-500: Zend Framework Certification

which includes a file specified by request): <code> <?

Consider the PHP program (which includes a file specified by request):
<code>
<?php
$color = ‘blue’;
if (isset( $_GET[‘COLOR’] ) )
$color = $_GET[‘COLOR’];
require( $color . ‘.php’ );
?>
<form method=”get”>
<select name=”COLOR”>
<option value=”red”>red</option>
<option value=”blue”>blue</option>
</select>
<input type=”submit”>
</form>
</code>
A malicious user injects the following command:
<code>
/vulnerable.php?COLOR=C:\\notes.txt%00
</code>
Where vulnerable.php is a remotely hosted file containing an exploit. What does the malicious
user want to do?


Page 8 of 13« First...678910...Last »