DVWA : File Inclusion Vulnerability Solution (LOW Security)
The File Inclusion vulnerability allows an attacker to include a file, which can lead to exploiting a "dynamic file inclusion" mechanisms implemented in the target application. The vulnerability occurs due to the use of user-supplied input without proper validation. Remote File Inclusion (RFI) and Local File Inclusion (LFI) are two types File Inclusion.
LFI exploit allows an attacker to read (and sometimes execute) files on the victim machine.
RFI exploit allows accessing a file on the local machine, the attacker can execute code hosted on their own machine.
Reference Links -
https://owasp.org/www-project-web-sec...
https://owasp.org/www-project-web-sec...