Local File Inclusion

Definitions

1. A web application vulnerability that allows an attacker to make the server include or read local files from its own filesystem, often by manipulating path parameters. Local file inclusion can expose source code, credentials, logs, or in some cases enable code execution when combined with other weaknesses.

   In plain English: A web flaw that lets attackers make the server load or read local files it should not expose.

   Example: "The bug was a local file inclusion flaw that let testers read `/etc/passwd` through an unsanitized template parameter."

Related Terms

• WAF
• SSRF
• HTTPS
• CAPTCHA
• HTTP Strict Transport Security
• Implicit Grant
• Padding Oracle Attack
• WAF Rule
• MIME Type Attack
• REST API Security