Evolution of RFI/LFI - From Remote File Inclusion to Local File Inclusion, hackers continue to develop new attack vectors to evade anti-malware by splitting across multiple fields in infected files.

"The local file inclusion vulnerability exists due to the way user input data is used inside of PHP's include function that are part of the ajax_load_more and ajax_eael_product_gallery functions." ...

Using the inclusion switch will test for both local file inclusion (LFI) and RFI, again on every website identified on the target.

A researcher known for exposing application flaws posted screenshots showing Local File Inclusion vulnerabilities on Adult Friend Finder. The incident marks the second time in just over a year ...

"The local file inclusion vulnerability exists due to the way user input data is used inside of PHP's include function that are part of the ajax_load_more and ajax_eael_product_gallery functions ...