LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view