BBC.co.uk vuln/exploits! by Phsy

LFI & exploitable pages/files etc on BBC.co.uk by Phsy - https://twitter.com/#!/stramble
---------

old Blog:
http://backstage.bbc.co.uk/data_art/




SQLI: http://newsforums.bbc.co.uk/nol/thread.jspa?forumID='

LFI & header-injection:  http://backstage.bbc.co.uk/data_art/blog/2010/01/news-globe.php




Hostname: backstage0.mh.bbc.co.uk
HTTP/1.1 200 OK
IP address: 212.58.231.50:80
PHP/4.3.2
Apache 2.0.46
Red Hat linux
Internal: 127.0.0.1:8080


--