Zend 100-500 Question Answer
Consider the PHP program (which includes a file specified by request):
$color = 'blue';
if (isset( $_GET['COLOR'] ) )
$color = $_GET['COLOR'];
require( $color . '.php' );
?>
A malicious user injects the following command:
/vulnerable.php?COLOR=C:\\notes.txt%00
where vulnerable.php is a remotely hosted file containing an exploit.
What does the malicious user want to do?
Zend 100-500 Summary
- Vendor: Zend
- Product: 100-500
- Update on: Jul 25, 2025
- Questions: 202
