While enjoying my first coffee this morning I read about one
"Quick RFI Analysis" Jose Nazario published on "The Arbor Networks Security Blog". This reminded me of some research I have been doing at the beginning of last year. Remote File Inclusion (RFI) is an attack usually exploiting vulnerabilities within PHP scripts, allowing to include PHP code from another (remote) server. Even though RFI is well known already for a couple of years it still seems to be an issue, particularly since, as Jose writes in his Quick RFI Analysis: "AV is rarely ever invoked". I am going to publish some of my results in this field as soon as I find some time...
